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Generic registration of plug-ins for a directory server 

Generische Registrierung von Einschubmodulen fur einen Verzeichnis server 
Enregistrement generique de modules a insertion pour un serveur d 1 annuaire 

PATENT ASSIGNEE: 

Nortel Networks Corporation, (2748590), World Trade Center of Montreal, 
380 St Antoine Street West, 8th Floor, Montreal, Quebec H2Y 3Y4, (CA) , 
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Mackenzie, Andrew Bryan et al (79993), Sommerville & Rushton, 45 
Grosvenor Road, St Albans, Herts. AL1 3 AW, (GB) 
PATENT (CC, No, Kind, Date) : EP 1113648 A2 010704 (Basic) 

EP 1113648 A3 030709 
APPLICATION (CC, No, Date): EP 2000309559 001030; 
PRIORITY (CC, No, Date) : US 474763 991230 

DESIGNATED STATES: AT; BE; CH; CY; DE; DK; ES; FI; FR; GB; GR; IE; IT; LI; 

LU; MC; NL; PT; SE 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 

INTERNATIONAL PATENT CLASS: H04L-029/12; H04L-029/06; G06F-009/445 



ABSTRACT EP 1113648 A2 
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A registration method facilitates registration of a plug-in for a 
Lightweight Directory Access Protocol (LDAP) directory server accessible 
by a client. A generic interface is provided to mediate interaction 
between the client and the directory server. Information is obtained 
concerning one or more directory entries of interest to the plug-in. This 
information is recorded by the generic interface in a registry such that 
the generic interface is enabled to call at least one method of the 
plug-in upon receipt of a message from the client concerning at least one 
respective directory entry of interest. Directory entries of interest may 
be identified by either their object class or distinguished name (DN) . In 
the latter case, a wildcard syntax may be used to enable the plug-in 
record an interest in one or more related directory entries. 
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..SPECIFICATION purposes, the LDAP proxy 2 may examine each LDAP message, 
and call methods of a plug - in module 12, for only certain message 
types . For example, client requests which have the effect of adding, 
modifying, or deleting a selected attribute of a directory. . . 
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Multilevel security attribute passing methods, apparatuses, and computer 

program products in a stream 
Verfahren, Vorrichtungen und Computerprogrammprodukte zur Erfassung von 

Sicherheitsattributen verschiedener Niveaus in einem Datenstrom 
Procedes, dispositifs et supports logiciels pour le transfert d f un attribut 

de securite multiniveaux dans un flot de donnees 
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INTERNATIONAL PATENT CLASS: H04L-029/06 

ABSTRACT EP 1067745 A2 

A multilevel security attribute passing system on a computer operating 
under a multilevel operating system engaged in stream communications and 
enabling contemporaneously opening a plurality of sockets having the same 
port number while meeting the requirements of a predetermined security 
policy. 

The security attributes (183) of received data are copied into a 
credentials structure (173) identified by a pointer in an attribute 
structure (172) . The security of a data node configured for data stream 
communication is specified by storing the security attributes (183) of 
transferred data into a selected data structure and then pointing to the 
selected data structure with intervening transmission and attribute 
structures . 

ABSTRACT WORD COUNT: 106 

NOTE: 

Figure number on first page: 10 
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...SPECIFICATION to the reply. Under mandatory access control, the 

sensitivity label must contain the same security classification of the 
request of the originating system. The reply packet is further sent 26 
to the originating server , where the packet is trapped 29 by the source 

kernel and inspected 30 pursuant to the security protocol for that 
system. If the reply packet... 
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LOAD CONTROL AND OVERLOAD PROTECTION FOR A REAL-TIME COMMUNICATION SYSTEM 
LASTSTEUERUNG UND UBERLASTUNGSSCHUTZ FUR EIN ECHT-ZEIT KOMMUN I KAT I ONS SYS TEM 
REGULATION DE LA CHARGE ET PROTECTION CONTRE LES SURCHARGES POUR SYSTEME DE 
COMMUNICATION TEMPS REEL 
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...CLAIMS step to submit jobs to the buffer means (18) is subdivided into 
the substeps: 

a) classification of the request type according to any available 
or all of requested (Sll-1, S12-1), 

b) comparing the... 
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WEB REQUEST BROKER CONTROLLING MULTIPLE PROCESSES 
WEBAGENT ZUR ANFORDE RUNG VON ME H RE REN PROZESSEN 

SYSTEME DE COURTAGE POUR DEMANDES DANS LE WEB COMMANDANT DES OPERATIONS 
MULTIPLES 
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...SPECIFICATION location for the stored program used to initiate instances 

of the program 20. 

The dispatcher plug - in 30 determines in step 56 if the request 

object type (e.g., the virtual path specified in the client request) 

corresponds to an identifiable program. . . 
? tl8/5,k/9-12, 21-227 
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Multilevel security port methods, apparatuses, and computer program 
products 

Verfahren, Vorrichtung und Rechnerprogrammprodukte von mehrstufigen 
Sicherheitstoren 

Methodes, appareils et produits de programmes d'ordinateur de portes de 
securite a plusieurs niveaux 

PATENT ASSIGNEE: 

SUN MICROSYSTEMS, INC., (1392737), 901 San Antonio Road, MS PAL1-521, 
Palo Alto, California 94043, (US), (Applicant designated States: all) 
INVENTOR: 

Winiger, Gary W., 2379 Sun-Mor Avenue, Mountain View, California, (US) 
LEGAL REPRESENTATIVE: 

Kack, Jurgen et al (93671), Kahler Kack Mollekopf Vorderer Anger 239, 
86899 Landsberg, (DE) 
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INTERNATIONAL PATENT CLASS: G06F-012/14; G06F-001/00; H04L-029/06 

ABSTRACT EP 849680 A2 

A multilevel port system on a computer operating under a multilevel 
operating system to permit contemporaneously opening a plurality of 
sockets having the same port number while meeting the requirements of an 
appropriate security policy, thus allowing third party applications to 
run as if they were unimpeded by the security policy, and methods 
thereby. The computer system having an operating system adhering to an 
access control security mechanism. Such systems include government 
systems wherein a hierarchy of security classification levels are defined 
(e.g., top secret, secret, classified, unclassified), and commercial 
systems . Sensitivity labels pursuant to an access control security 
mechanism include at least hierarchical security classifications, and may 
include non-hierarchical categories or compartments which represent 
distinct areas of information in a system. A port is characterized by a 
port number and a sensitivity label thus permitting opening a plurality 
of ports having identical port numbers and unique sensitivity labels. 

ABSTRACT WORD COUNT: 150 

NOTE: 

Figure number on first page: 5 
LEGAL STATUS (Type, Pub Date, Kind, Text): 
Change: 000607 A2 International Patent Classification changed: 
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Application: 980624 A2 Published application (Alwith Search Report 
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.SPECIFICATION to the reply. Under mandatory access control, the 
sensitivity label must contain the same security classification of the 
request of the originating system. The reply packet is further sent 26 
to the originating server , where the packet is trapped 29 by the source 

kernel and inspected 30 pursuant to the security protocol for that 
system. If the reply packet... 
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Document server for processing a distribution job in a document processing 
system 

Dokumenten-Server zur Verarbeitung eines Vertex lungs jobs in einem 

Dokumentenverabeitungs system 
Serveur de document pour traiter une tache de distribution dans un systeme 

de document 
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..SPECIFICATION of Protocol Modules (PMs) and Protocol Stacks. A Protocol 
Service is responsible for translating different types of requests 
from remote hosts into a common format and for relaying these requests 
to the Microkernel . , 
The currently disclosed embodiment contemplates support for local J 
access by other Microkernel subsystems, PDT Applications, and DLMs to 
Fax/Modem facilities, network operations, and to the various... 

..SPECIFICATION of Protocol Modules (PMs) and Protocol Stacks. A Protocol 
Service is' responsible for translating different types of requests 
from remote hosts into a common format and for relaying these requests 
to the Microkernel . 

The currently disclosed embodiment contemplates support for local 
access by other Microkernel subsystems, PDT Applications, and DLMs to 
Fax/Modem facilities, network operations, and to the various... 
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...SPECIFICATION IORB and examining the "device type field." If the "device 
type field" indicates that a server does not exist for this type of 
request , then DSH92 creates a server and passes the request to the 
assigned server via MQI . That is, DSH92 issues fork and exec system 
calls to the kernel manager 70 which spawns a new host process running 
LK file or LK pipe server. . . 
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...SPECIFICATION the following: 

Creation (implicit in creation of a right) and deletion 

Query of the associated type 

Rename 

Upon request , the kernel provides notification of a name becoming 
unusable . 

Since port name spaces are bound to tasks... 
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English Abstract 

A method, a system and a client of / for rendering a first media type 
(11) content on a browser (10) on a client (16) with a rendering support 
from a server (13). The method includes the steps of: determining if the 
first media type content is not suitable for being rendered due to 
limited resources on the client, and, if this is the case activating a 
first software component (12) prepared for handling and receiving 
rendering support from the server; sending, from the client, a link to 
the first media type content with a request for rendering support; 
determining, on the server, a second media type content of the received 
link, wherein the second media type content is suitable for being 
rendered on the client; transferring the second media type content to the 
client; and rendering, by the first software component, the second media 
type content. The method further includes the steps of receiving, by the 
first software component, a first input event; sending the first input 
event from the first software component to a second software component 
(15) on the server; transforming, by the second software component, the 
received first input event to a third media type content based on the 
first input event and the second media type content; transferring, by the 
second software component, the third media type content to the first 
software component; and rendering the third media type content. This 
enables for rendering of media types on the browser on the client that 
the browser was not initially suitable for or did not have system 
resources for. 



French Abstract 



L 1 invention concerne un procede, un systeme et un client pour effectuer 
un rendu d'un premier contenu de type media (11) dans un navigateur (10), 
au niveau d f un client (16), a l'aide d f un support de rendu provenant d ! un 
serveur (13). Le procede consiste a: determiner si le premier contenu de 
type media ne se prete pas a un rendu du fait de ressources limitees au 
niveau du client et, si c f est le cas, activer une premiere composante 
logicielle (12) preparee pour gerer et recevoir un support de rendu 
provenant du serveur; envoyer du client au premier contenu de type media 
un lien accompagne d'une demande de support de rendu; determiner, au 
niveau du serveur, un deuxieme contenu de type media du lien recu, ledit 
deuxieme contenu de type media se pretant a un rendu au niveau du client; 
transferer le deuxieme contenu de type media au client; et utiliser la 
premiere composante logicielle pour realiser un rendu dudit deuxieme 
contenu de type media. Le procede consiste en outre a: recevoir un 
premier evenement d' entree par le biais de la premiere composante 
logicielle; envoyer ledit premier evenement d 1 entree de la premiere 
composante logicielle a une seconde composante logicielle (15), au niveau 
du serveur; utiliser la seconde composante logicielle pour transformer le 
premier evenement d 1 entree recu en un troisieme contenu de type media, 
sur la base du premier evenement d 1 entree et du deuxieme contenu de type 
media; utiliser la seconde composante logicielle pour transferer le 
troisieme contenu de type media a la premiere composante logicielle; et 
effectuer un rendu du troisieme contenu de type media. Ce procede permet 
de realiser des rendus de types media dans un navigateur, au niveau du 
client, la ou, initialement , ledit navigateur etait inapproprie ou 
depourvu des ressources systeme pour cette tache. 

Legal Status (Type, Date, Text) 

Publication 20031127 A2 Without international search report and to be 

republished upon receipt of that report . 

Fulltext Availability: 
Detailed Description 
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Detailed Description 

... link, etc comprises. 

- transferring, by the first software component, the link to the first 
media type content and 

the request to an application manager in the server ; and 

- creating, by the application manager, the second software component as 
a plug - in application in response to the received link and request. 

In the first step said link... 

Claim 

... the client comprises: 

- transferring, by the first software component, the link to the first 
media type content and 

the request to an application manager in the server ; and 

- creating, by the application manager, the second software component as 
a plug - in 10 application in response to the received link and 
request . 

5 A method according. . . 
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English Abstract 

A tunneling system and method is described for traversing firewalls, 
NATs, and proxies. Upon a request from a device on a secure private 
network or on a public network such as the Internet, a connection to 
designated or permitted devices of the secure private network by way of 
the public network can be established, allowing selected devices of the 
private network to access devices on the public network. A bi-directional 
channel (340) can be established where information such as rich 
multimedia and real-time voice and video can be accessed or communicated. 

French Abstract 

L 1 invention porte sur un systeme et sur un procede de tunnellisation pour 
traverser des pare-feu, des NAT et des mandataires. A la demande 
provenant d ! un dispositif sur un reseau prive securise ou sur un reseau 
public tel qu* Internet, il est possible d ! etablir une connexion vers des 
dispositifs designes ou autorises du reseau prive securise par le bais du 
reseau public, en permettant aux dispositifs selectionnes du reseau prive 
d'acceder a des dispositifs du reseau public. II est possible d'etablir 
une voie bidirectionnelle (340) dans laquelle on peut acceder a des 
informations ou les communiquer telles que des informations multimedia, 
des informations de transmission de la voix et de transmission video en 
temps reel. 
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Detailed Description 



Detailed Description 

... client endpoint as well as other endpoints. If other endpoints that 
can reach the tunneling server without tunneling, with HTTP for 
example, the server must be able to differentiate this request from 
the tunneled requests. 

[001041 FIGS. 3 and 4 depict other possible configurations for using the 
tunnel plugins . In FIG. 3, a configuration is disclosed for providing a 
TP on a separate system. . . 
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English Abstract 

A server is disclosed that presents content to a client. The server 
receives a request (102) for particular content. In response to the 



request, the server accesses (104) data and/or code that describes the 
particular content. The server compiles (108) that code and/or data to 
create executable code, and transmits (110) the executable code to the 
client for execution on the client. In one embodiment, the code 
describing the particular content is a mark-up language description. In 
various implementations, the executable code includes a user interface 
that provides access to the requested content. 

French Abstract 

L 1 invention concerne un serveur destine a presenter un contenu a un 
client. Ce serveur recoit une demande (102) relative a un contenu 
particulier. En reponse a cette demande, le serveur accede (104) a des 
donnees et/ou a un code decrivant le contenu particulier, puis il compile 
(108) ce code et/ou ces donnees pour creer un code executable qu'il 
transmet (110) au client en vue de son execution sur le systeme client. 
Dans un mode de realisation, le code decrivant le contenu particulier est 
une description en langage de balisage. Dans divers modes de realisation, 
le code executable contient une interface utilisateur qui permet 
d'acceder au contenu demande. 
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Fulltext Availability: 
Detailed Description 

Detailed Description 

. . . it first determines the data connector object associated with the 
request (step 702) and the type of request -read, write or manage 
(step 704). In one embodiment, the Presentation Server provides a plug 
- in interface for adding new data connector objects. Each data 
connector object is able to communicate... 
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English Abstract 

The intelligent distributed file system (110) enables the storing of file 
data among a plurality of smart storage units (114) which are accessed as 
a single file system. The intelligent distributed file system (110) 
utilizes a metadata data structure to track and manage detailed 
information about each file, including, for example, the device and block 
locations of the file's data blocks, to permit different levels of 
replication and/or redundancy within a single file system, to facilitate 
the change of redundancy parameters, to provide high-level protection for 
metadata, to replicate and move data in real-time, and so forth. 

French Abstract 

L 1 invention concerne un systeme intelligent (110) de fichiers repartis 
permettant de stocker des donnees de fichiers dans une pluralite d f unites 
de stockage (114) intelligentes qui sont accessibles en tant que systeme 
de fichiers simple. Ledit systeme intelligent (114) de fichiers repartis 
utilise une structure de donnees a metadonnees pour suivre et gerer des 
informations detaillees sur chaque fichier, comprenant par exemple les 
emplacements du dispositif et du bloc des blocs de donnees du fichier, 
afin de permettre differents niveaux de duplication et/ou de redondance 
dans le systeme de fichier unique, de faciliter le changement des 
parametres de redondance, de fournir une protection de haut niveau des 
metadonnees, de dupliquer et de deplacer des donnees en temps reel, et 
ainsi de suite. 
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Detailed Description 

layer, a Local File Store layer, and a Storage Device layer. 



User Layer 
User Space 

Kernel Space 
Virtual File System Layer 
Local File System Layer 
Local File Store Layer 
Storage Device Layer 
Table I 

In one type of file request , the request is received via a user-level 
protocol application for file sharing, such as, for example, HTTPD (the 
Apache web server ) , FTPD, or SMBD used on Unix which implements a 
version of the Microsoft Windows file sharing server protocol. The 
user-level protocol application performs a kernel level open, read, 
seek, write, or close system call, such as, for example, by making. . . 
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English Abstract 

A Stateful Reference Monitor can be loaded into an existing commercial 
operating system, and then can regulate access to many different types of 
resources. The reference monitor maintains an updateable storage area 
whose contents can be used to affect access decisions, and access 
decisions can be based on arbitrary properties of the request. 

French Abstract 

L f invention concerne un moniteur de reference avec etat, pouvant etre 
charge dans un systeme d 1 exploitation commercial existant, et pouvant 
ensuite reguler faeces a plusieurs types differents de ressources. Ce 
moniteur de reference permet de maintenir une zone de stockage pouvant 
etre mise a jour, dont le contenu peut etre utilise pour modifier des 
decisions d'acces, et des decisions d'acces peuvent etre fondees sur des 
proprietes arbitraires de la demande. 
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implemented in the exemplary embodiment as drivers loaded with, but 
independent of, the operating system kernel . Interceptors 10 1 
interact with the operating system at a very low level, by intercepting 
various types of operating system requests , etc., referred to herein 
as events, for example requests for access to operating system resources 
such as a file or network comiection. When an interceptor 10 1 
intercepts an event, it generates an event message... 
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English Abstract 

A method and system for wireless access to a user's desktop computer 
includes a controller that allows data and application resident on the 
user's desktop to be accessed on the wireless device regardless of device 
type, language, or protocols used. The controller detects what type of 
wireless device is being used and applies the appropriate formatting 
through plug-ins that allow the user's wireless device to communicate to 
the user's desktop through the controller. Data and applications found on 
the user's desktop are displayed on the user's wireless. In addition, 
data entries and requests are allowed through the controller from the 
wireless device to the user's computer. 

French Abstract 

L' invention concerne un procede et un systeme permettant un acces sans 
fil a un ordinateur d 1 utilisateur . Ce systeme comprend un controleur qui 
permet d'acceder aux donnees et a 1 1 application residant dans ledit 
ordinateur d 1 utilisateur, sur le dispositif sans fil, sans tenir compte 
du type de dispositif, du langage ou des protocoles utilises. Ledit 
controleur detecte le type dispositif sans fil en cours d ' utilisation et 
applique le formatage approprie via des modules d 1 extension qui 
permettent au dispositif sans fil de 1 ' utilisateur de communiquer avec 
l'ordinateur d' utilisateur via le controleur. Les donnees et les 
applications trouvees sur le bureau de 1 ' utilisateur sont affiches sur 
son dispositif sans fil. En outre, des saisies et des demandes de donnees 
peuvent etre transmises du dispositif sans fil a 1' ordinateur 
d 1 utilisateur via le controleur. 
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type that is customized for each type of device and browser. The 
service type presentation plug - in makes requests to the service 
type logic plug - in and is preferably application specific. 

The advantage is to provide the richest possible experience for. . .may not 
be notified when access is attempted, either successful or unsuccessful, 
with the user server in block 606. Interpretation of the request 
commences in block 607 . Logic is used via plug - ins for appropriate 
presentation and service type manipulations. The request is passed to 
a storage server 608 if no communication link is established 
17 

in block 606. If a connection is established, the user server responds 
to the 

cont roller inblock609 . Block610depictsthecontrollerthentransmif tingthe 
response to the user's wireless device for further requests... 
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English Abstract 

A service desk (10) capability is accessible by customers of the service 
desk, the customers including external customers, ( 14 , 18 ) e-commerce 
customers, and global customers. The service desk (10) includes means for 
solving problems and incidents reported, andalso means for tracking and 
reporting the service desk's perform ance in solving the problems and 
incidents. A method for providing the service desk (10) capability is 
also disclosed. 

French Abstract 

Une f onctionnalite de poste de service est rendue accessible aux clients 
d f un poste de service, les clients comprenant des clients externes, des 
clients de commerce electronique, et des clients a l'echelle mondiale. Le 
poste de service comporte des moyens permettant de resoudre des problemes 
ou des incidents rapport es, ainsi que des moyens de suivi et 
d 1 etablissement de rapports concernant l'efficacite du poste de service a 
resoudre les problemes et les incidents. L 1 invention concerne egalement 
un procede de mise en oeuvre d'une f onctionnalite de poste de service. 
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Claims 

Claim 

... information into a service request. 

9 The method of Claim 1, wherein the process of categorizing the 

request includes determining the type of request , assigning a 

priority to the 1 5 request, and sending the request for resolution. 
1. . . 

...into a service request. 

1 1. The method of Claim 1 , wherein the process of categorizing the 

request includes determining the type of request , assigning a 

priority to the request, and sending the request for resolution. 

12 The method request for service is 

categorized according to at least one of a service request type 
a service request priority. 

28 The method of Claim 1, wherein resolving the request for service is 
accomplished. . . 
. . .problem, updating the information if necessary, 

1 5 and entering the information into a service request ; 

categorizing the service request by determining the type of 
request and 

assigning a priority to the request; 

evaluating whether an operator can resolve the request... 
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English Abstract 

A system and method by which users via programs on one computer may 
seamlessly access files remotely stored on other computers that run a 
well known file access protocol. All programs running on a personal 
computer may access remote files as easily and in the same manner as 
accessing files on ' the personal computer's file system without requiring 
any changes to the program 1 s method of communicating with the computer's 
existing file system. An operating system extension and an application 
level network access program are provided. The operating system extension 
receives file systems requests for remote files from the operating system 
than were issued according to a well known application program interface. 
The operating system extension forwards the remote file system request to 
the network access program. The network access program reformats the 
request according to a well known application level network protocol 
extension and sends it over a network to a remote computer system. The 
network access program receives responses over the network from the 
remote computer system in the well known format, processes the response, 
and forwards pertinent information to the operating system extension. The 
operating system extension then passes responsive information to the 
program that issued the remote file system request via the well known 
application program interface. The remote file system may be cached on 
the local file system so that remote file system requests may be enacted 
on the locally cached copy. In one embodiment, personal computers access 
files on remote computers over the Internet via the distributed authoring 
and versioning (WebDAV) protocol extension to be the hypertext transfer 
protocol (HTTP) . 

French Abstract 

L 1 invention concerne un systeme et un precede permettant a des 



utilisateurs d'acceder de maniere transparente, via des programmes 
s 1 executant sur un ordinateur, a des fichiers stockes a distance sur 
d'autres ordinateurs qui executent un protocole d'acces de fichiers 
connu. Tous les programmes s' executant sur un ordinateur personnel 
peuvent acceder, aussi facilement et de la meme maniere, a des fichiers 
distants qu'a des fichiers du systeme de fichiers de 1' ordinateur 
personnel sans avoir recours a des modifications du procede de 
communication de programme avec le systeme de fichiers existant de 
1 1 ordinateur . L' invention concerne egalement une extension de systeme 
d 1 exploitation et un programme d f acces de reseau fonctionnant au niveau 
application. L' extension de systeme d 1 exploitation recoit des demandes de 
systeme de fichiers pour des fichiers distants a partir du systeme 
d 1 exploitation, ces demandes etant emises en fonction d ! une interface de 
programme d' application connue. Ladite extension de systeme 
d' exploitation envoie la demande du systeme de fichiers distant au 
programme d'acces de reseau. Le programme d'acces de reseau reformatte 
ladite demande en fonction d'une extension de protocole de reseau de 
niveau application connue, et l 1 envoie sur un reseau a un systeme 
informatique distant. Ledit programme d'acces de reseau recoit des 
reponses sur le reseau provenant du systeme informatique distant selon un 
format connu, traite la reponse, et envoie des informations pertinentes a 
l 1 extension de systeme d 1 exploitation . Ladite extension de systeme 
d f exploitation transmet ensuite des informations sensibles au programme 
ayant emis la demande de systeme de fichiers distant via l 1 interface de 
programme d 1 application connue. Le systeme de fichiers distant peut etre 
mis en antememoire sur le systeme de fichiers local de sorte que les 
demandes de systeme de fichiers distant peuvent etre effectuees sur la 
copie mise localement en antememoire. Selon un mode de realisation, les 
ordinateurs personnels accedent a des fichiers implantes sur des 
ordinateurs distants sur 1' Internet via le protocole de creation et de 
gestion de versions distribue (WebDAV) qui constitue une extension du 
protocole de transfert hypertexte (HTTP) . 
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... the SFS network access program, as shown in block 404. In one 

embodiment, the SFS plug - in establishes a socket connection with the 
SFS 

network access program, and sends the pathname or other identifier 
along with the appropriate parameters and a request type through the 
socket to the SFS network 

access program. The SFS network access program processes the request 
and 

sends it to the appropriate WebDAV enabled HTTP server... 
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English Abstract 

The invention provides methods and apparatus for implementing Internet 
content filtering based on a classification system. The classification 
system is promulgated by a Certification Authority in furtherance of a 
public policy objective. The bona fides of the system are upheld and the 
system is implemented through the issuance of digital certificates and 
electronic compliance seals . 
French Abstract 

Cette invention a trait a des methodes et a l'appareil correspondant 
permettant de proceder au filtrage d ! un contenu d ! Internet d'apres un 
systeme de classification. Ce systeme de classification est publie par 
une Autorite de certification aux fins de la bonne marche d'un objectif 
de politique generale. La bona fides du systeme est reconnue et le 
systeme est implemente par le truchement de I 1 emission de certificats 
numeriques et de sceaux electroniques de conformite. 
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Detailed Description 
. . . the 

certificate is determined to not cover a particular classification. For 
example a browser, browser plug in , or other client application 
provided to users may allow a user to request that only certain 
categories be transmitted to 

them and the ISP's software compares the user's request to... 
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English Abstract 

A system for and method of enhancing web page delivery. The invention 
provides the ability to control redirection of Web traffic of humans and 
search engine spiders. It can differentiate between these types of 
visitors to a Web page, track their movements, log critical information, 
and analyze the Web traffic in order to judge the success in driving 
quality traffic to some known goal on a Web site, such as a sale. The 
system may generate dynamically optimized web pages targeted to specific 
search engines, in order to optimize the search engine ranking and 
visibility of a Web site, such as an online marketer's Web site. 

French Abstract 

L' invention concerne un systeme et un procede permettant d'ameliorer le 
transfert de pages Web. Selon la presente invention, ledit systeme off re 



la possibilite de gerer la reorientation du trafic Web d'individus et de 
moteurs de recherche. Ce systeme peut etablir une distinction entre ces 
types de visiteurs sur une page Web, suivre leurs mouvements, enregistrer 
des informations critiques et analyser le trafic Web, afin d ! evaluer la 
qualite de la gestion de trafic dans un objectif connu sur un site Web, 
tel qu'une vente. Ledit systeme peut generer, de facon dynamique, des 
pages Web optimisees, destinees a des moteurs de recherche specifiques, 
afin d ! optimiser les resultats d'un moteur de recherche et la visibilite 
d'un site Web, tels qu'un site Web de commercants. 
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... to demonstrate in specific tenns how the invention might operate. 

THE PL UG-17V ~ 
A plug - in . is required when IXC Engine 10 is operating on the same \ 
Web server as the web site 20 to which (inverted exclamation mark)t isl 
redirecting traffic. This plug - in is needed to differentiate which\ 
requests are coming to IXC Engine 10 and which should be passed onto the 
Web site. . . * 
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English Abstract 

The invention is a method and system (10, 20) for inputting the weight of 
a parcel into a web-based shipping application of a data processing 
system. The data processing system comprises a web site (106) for a 
provider server (104) and a client node (102) in communication with the 
provider server (104). The web site (106) further comprises web pages 
(106) and script (108) functionality for linking with a scale driver 
(112) resident in a weighing scale (30, 114) located at the client node 
(102). The weighing scale (30, 114) comprises a scale server (110) 
resident ultimately at the client node (102), but callable by the client 
node (102) under control of the script (108) functionality for allowing 
the script (108) at the client node (102) to link with the weighing scale 
(30, 114) by utilizing the scale driver (112). The method begins with the 
calling of the web site (106), from the client node (102), and requesting 
a scale activation routine be activated. The routine includes the use of 
script (108) to call an Active-X automation server, which is downloaded, 
with an appropriate scale driver (112) to the client node (102) . Once the 
system user has logged onto the shipping application and the parcel has 
been weighed on a weighing scale, the shipping application requests the 
weight from the scale server (110) by way of the script (108) call and 
then enters the weight, through the browser into the shipping 
application . 

French Abstract 

L' invention porte sur un procede et un systeme (10, 20) d' introduction du 
poids d'un paquet dans une application d 1 expedition par le web d'un 
systeme de traitement de donnees. Le systeme de traitement de donnees 
comprend un site web (106) d'un serveur fournisseur (104) et un noeud 
client (102) communiquant avec le serveur fournisseur (104). Le site web 
(106) comprend egalement des pages web (106) et une f onctionnalite script 
(108) pour la liaison avec un module de commande (112) de balance 
residant dans une balance (30, 114) placee au niveau du noeud client 
(102). La balance (30, 114) comprend un serveur (110) residant en bout de 
ligne au niveau du noeud client (102), mais pouvant etre appele par le 
noeud client (102) sous la commande de la f onctionnalite script (108) 
pour permettre la connexion du script (108) a la balance (30, 114) au 
niveau du noeud client (102) au moyen du module de commande (112) . Le 
procede consiste d'abord a appeler le site web (106) depuis le noeud 
client (102) et a demander 1' activation d f un programme d 1 activation de 
balance. Le programme comprend 1 1 utilisation du script (108) pour appeler 
un serveur d 1 automatisation X actif qui est telecharge avec un module de 
commande (112) approprie de balance vers le noeud client (102). Lorsque 
1 1 utilisateur systeme a ouvert une session d ' application d 1 expedition et 
que le paquet a ete pese sur une balance, 1 ' application d 1 expedition 
demande le poids a partir du serveur (110) par l'appel du script (108), 
puis introduit le poids dans 1 1 application d f expedition par le 
navigateur . 
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for physically interfacing the weighing scale with the client 

4 

node and then ultimately the network itself. A set of plug - ins for 
communication to the scale server may be required for certain browser 
types . 

The client node requests that a scale activation routine be activated 
at the web site for download to the. . . 
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English Abstract 

A computer server system having a highly distributed architecture (HDA) 
generally includes a non-hierarchical array of physical machines, each 
having physical and logical (i.e. virtual) resources (1-3), a network 
enabling data transmission between and among the physical machines, and 
program code for allocating and managing system resources (10) . The 
program code for allocating and managing system resources may be in the 
form of an HDA Server operating system (100) designed to take advantage 
of the distributed server architecture; advantages of the HDA system 
(100) may include rapid adaptation to system events and migration of 
application components among physical and logical resources (1-3). In one 
exemplary embodiment, a system including an HDA computer server having an 
HDA Server operating system (100) may serve as a platform for 
facilitating Internet transactions through use of Adaptive User 
Interfaces (AUIs) for communication between the HDA system (100) and an 
external client. Such an HDA-based system provides efficient overall 
system resource management, excellent fault tolerance characteristics 
(i.e. stability and reliability), and virtually infinite scalability. 

French Abstract 

L ! invention concerne un systeme de serveur informatique a architecture 
hautement distribuee (HDA), qui comprend generalement un reseau non 



hierarchique de machines physiques, chaque machine possedant des 
ressources (1-3) physiques et logiques (c ' est-a-dire, virtuelles), un 
reseau permettant de transmettre des donnees entre et dans les machines 
physiques, et un code de programme permettant d'attribuer et de gerer des 
ressources systeme (10). Le code qui permet d f attribuer et de gerer des 
ressources systeme peut se presenter sous la forme d f un systeme 
d' exploitation (100) de serveur HDA concu pour benef icier des avantages 
de 1 1 architecture de serveur distribuee. Les avantages du systeme HDA 
(100) peuvent consister en une adaptation rapide aux evenements du 
systeme, et en une migration de composants d ' application dans les 
ressources (1-3) physiques et logiques. Selon un mode de realisation 
exemplaire, un systeme comprenant un serveur informatique HDA qui possede 
un systeme d ' exploitation (100) de serveur HDA peut servir de plate-forme 
destinee a faciliter des transactions Internet a l f aide d ! interfaces 
utilisateur adaptatives (AUI), de facon a etablir une communication entre 
le systeme HDA (100) et un client externe. Ce systeme HDA fournit une 
gestion de ressources systeme globale efficace, d ' excellentes 
caracteristiques de tolerance d'erreur (c 1 est-a-dire, stabilite et 
fiabilite) , et une extensibilite virtuelle infinie. 
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... the nature or architecture of database 1404. 

When a Message arrives at a database access Plugin 1401,1402, the 
Plugin may determine the type of database request and may 
subsequently invoke the appropriate method on the front end to the 
database 1404 . . . 
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English Abstract 

System and method for performing application server load balancing. 
Requests may be mapped from a client computer (s) to a set of application 
servers configured in a cluster. In various embodiments, different load 
balancing methods and criteria may be used. For example, the client 
computer (s) may be operable to make the load balancing decisions, e.g., 
based on the lowest response time seen from the application servers. The 
system may also be configured so that load balancing decisions are made 
by load balancing services running on the application server computers. A 
variety of load balancing criteria may be used, including server load 
factors such as CPU load, disk input/output rate, number of requests 
queued, etc. Decisions may also take into account various application 
component performance criteria, such as the application server that most 
recently ran a component or whether or not cached results for a component 
are available on an application server. The application server system may 
also support "sticky" load balancing, so that requests issued within the 
context of a particular session that reference an application component 
are all processed by the application component instance running on the 
same application server. The client computer (s) may be operable to 
maintain information regarding sticky requests so that sticky requests 
can be sent directly to the correct application server. In various 
embodiments, the application server system may also enforce even 
distribution of sticky requests. In various embodiments, the system may 



support "graceful distribution" methods that utilize a winner-take-most 
rather than a winner-take-all strategy. 



French Abstract 

L 1 invention concerne un systeme et un procede destines a equilibrer les 
charges d f un serveur d 1 application . Les demandes peuvent etre appliquees, 
a partir d'un ou plusieurs ordinateur (s ) de clients vers un ensemble de 
serveurs d' application, configures en groupe. Dans divers modes de 
realisation, plusieurs procedes et criteres d 1 equilibrage des charges 
peuvent etre utilises. Par exemple, le ou les ordinateur ( s ) du client 
peuvent etre utilises, en vue de prendre les decisions concernant 
1 1 equilibrage des charges. Ces decisions peuvent etre, par exemple, 
basees sur le delai de reponse le plus court releve a partir des serveurs 
d ! application. Le systeme peut aussi etre configure, de maniere a ce que 
les decisions concernant 1 1 equilibrage des charges soient prises par des 
services d 1 equilibrage des charges fonctionnant sur les ordinateurs des 
serveurs d ! application. Plusieurs criteres d ' equilibrage des charges 
peuvent etre retenus, y compris les facteurs de charge de serveur, comme 
la charge CPU, le debit de donnees du disque, le nombre de demandes en 
attente, etc. Les decisions peuvent aussi prendre en compte divers 
criteres de performance des composants d ' application . Par exemple, le 
serveur d 1 application qui a utilise un composant en dernier ou le fait de 
savoir si les resultats du cache d f un composant sont disponibles ou pas 
sur un serveur d 1 application . Le systeme de serveurs d 1 application peut 
egalement assurer une repartition des charges <= collantes >-, de maniere 
a ce que les demandes emises dans le contexte d'une session determinee 
qui reference un composant d ' application, soient toutes traitees par le 
dispositif de composant d 1 application fonctionnant sur le meme serveur 
d' application . Le ou les ordinateur ( s ) du client peuvent etre utilises, 
afin de conserver les informations concernant les demandes <= collantes 
>=, de maniere a ce que celles-ci puissent etre directement envoyees au 
bon serveur d 1 application . Dans divers modes de realisation, le systeme 
de serveurs d 1 application peut aussi mettre en place une distribution 
equilibree des demandes <= collantes >=. Dans divers modes de 
realisation, ce systemepeut presenter des procedes de <= distribution 
harmonieuse >=, quideploie une strategie de <= celui-qui-en-prend-le-plus 
>= plutot qu'une strategie de <= celui-qui-prend-tout >=. 
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. . . a weighted round-robin algorithm or may be applied to enforce even 
distribution for certain types of requests @ as described below. 

Figure 6 illustrates one embodiment of a 1 web server client 300 with a 
web server plug - in 302 comprising a load balancer component 304 
which distributes requests across an application server cluster. . . 
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English Abstract 

System and method for enabling application server request failover. For 
each application server request to be performed by a client computer, a 
requesting thread may be operable to utilize a custom wire-level 
communication protocol. Request failure detection mechanisms may be 
built into the custom wire-level communication protocol so that a 
requesting thread detects a failed request much sooner than if the thread 
utilized a standard communication protocol and relied on the client 
computer operating system for notification of failed requests. After 
sending a request to an application server, a requesting thread may be 
operable to "sleep" and then periodically wake up to poll the application 
server computer to determine whether the request has failed. If the 
requesting thread receives a response from the application server 
computer indicating that the request is not currently being processed, 
then the requesting thread may re-send the request. Receiving no 
response to the poll message may indicate that the application server 
computer is offline, e.g., due to a failure. The requesting thread may 
redirect the request to another application server computer if necessary. 

French Abstract 

Systeme et precede servant a valider 1 ' echec d'une demande de serveur 



d 1 application. Pour chaque demande de serveur d 1 application qu'un 
ordinateur client doit effectuer, on peut mettre en service un processus 
de demande afin d'utiliser un protocole de communication personnalise de 
niveau filaire. On peut integrer des mecanismes de detection d'echec de 
demande a ce protocole de communication, de maniere a detecter un 
processus de demande beaucoup plus tot que si ce processus mettait en 
application un protocole de communication standard et se basait sur le 
systeme d 1 exploitation informatique client afin de notifier les demandes 
non abouties. Apres 1* envoi d'une demande a un serveur d 1 application, le 
processus d 1 application peut etre mis en sommeil et eveille 
periodiquement afin d'interroger l f ordinateur du serveur d f application 
pour determiner si la demande a echoue. Si le processus de demande recoit 
une reponse de 1' ordinateur du serveur d ' application indiquant que la 
demande n'est pas actuellement en cours de traitement, le processus de 
demande peut reactualiser la demande. L 1 absence de reception de reponse 
au message d 1 interrogation peut indiquer que 1' ordinateur du serveur 
d f application est hors service, par exemple a cause d'une panne. Le 
processus de demande peut rediriger la demande vers un autre ordinateur 
de serveur d 1 application si necessaire. 
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... a weighted round-robin algorithm or may be applied to enforce even 
distribution for certain types of requests , as described below. 

Figure 6 illustrates one embodiment of a web server client 300 with a 
web server plug - in 302 comprising a load balancer component 304 
which distributes requests across an application server cluster... 
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English Abstract 

A secure network includes a network server and a plurality of clients 
connected. A security server, typically physically separate from the 
network server, contains a database storing access rights for the 
network. A security agent at the network server controls access to the 
network server by communicating with the security server over the network 
in response to an access request from a client to determine access rights 
for the client. 



French Abstract 

Selon cette invention, un reseau securise comprend un serveur de reseau 
et plusieurs clients connectes. Un serveur de securite, generalement 
separe physiquement du serveur de reseau, contient une base de donnees 
stockant les droits d'acces au reseau. Un agent de securite aupres du 
serveur reseau controle l'acces au serveur reseau en communiquant avec un 
serveur de securite a t ravers le reseau en reponse a une demande d'acces 
emanant d f un client, et ce pour determiner les droits d'acces pour ce 
client . 
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such as tape drives, modems, sound systems, CDROM drives, floppy 
drives, or optical drives; and kernel services. These resources are 
known as elements. 
OS agent 

The Unix agent 18 is responsible for intercepting any kind of request 
for access to elements that actors ask of the operating system. In Unix, 
this task is nonnally handled by the kernel . The Unix agent intercepts 
these calls, gathers some information about the request, sends a query. . . 
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English Abstract 

To keep control of all relevant events in a real-time communication 
system, there is proposed a load regulation method for a central unit in 
this real-time communication system such that at least one job is 
submitted to a job buffer means (18) providing a pre-specif ied storage 
capacity. Further, jobs stored in the buffer means (18) are submitted to 
a processing means (22) for further processing. According to the 
invention, the available storage capacity of the buffer means (18) is 
updated dynamically according to the actually used job buffer capacity 
after each load regulation interval. Thus it is possible to keep control 
of all major events and processes within the real-time communication 
system . 

French Abstract 

Pour garder le controle de tous les evenements pertinents dans un 
systeme de communication temps reel, on propose un procede de regulation 
de la charge destine a une unite centrale de ce systeme de communication 
temps reel. Ce procede permet de soumettre au moins un travail a une 
memoire tampon (18) de travaux de capacite memoire predefinie. Ensuite, 
les travaux de memoire tampon (18) sont soumis a une unite de traitement 
(22) en vue d'un traitement ulterieur. Selon l 1 invention, apres chaque 
intervalle de regulation de la charge, la capacite disponible de la 
memoire tampon (18) est mise a jour de facon dynamique, en fonction de la 
capacite de la memoire tampon de travaux reellement utilisee. Des lors, 
il est possible de garder le controle de tous les evenements et 
traitement s majeurs a l'interieur du systeme de communication temps reel. 
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Claim 

... 18) (step a, claims 1, 2) is sub 
divided into the sub-steps: 
62 

a) classification of the request type according to 
any available or all of requested (Sll-1, 512-1), 

b) comparing the. . . 
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English Abstract 

A web server configured to respond to client requests over a network 
such as the World Wide Web includes a web listener having a Hypertext 
Transfer Protocol (HTTP) daemon, a plurality of extension programs 
configured to perform respective operations, and a web request broker 
configured to identify one of the programs for responding to a client 
request, and determine the availability of an instance of the identified 
program. The web request broker maintains control of multiple instances 
of each server extension program to provide enhanced server operation 
without overwhelming server resources. The web request broker maintains a 
minimum number of instances of the identified program in memory, each 
executed in its own address space. The web request broker determines 
whether an available instance of the identified program is available from 
an existing number of instances, and selectively initiates a new instance 
of the program if no. other instance is available. If no instance is 



available and the existing number of instances exceeds the maximum 

prescribed number, then the web request broker returns the reply to the 

web listener to send a reply over the network that the request was not 
processed. 

French Abstract 

Serveur Web configure pour repondre a des demandes de clients dans un 
reseau tel que le WWW. Ce serveur comprend un recepteur Web qui possede 
un demon protocole de transfert hypertexte (HTTP) , une pluralite de 
programmes d 1 extension configures pour executer les operations 
respect ives, et un systeme de courtage pour demandes dans le Web, 
configure pour identifier un des programmes en vue de repondre a la 
demande d f un client et pour determiner la disponibilite d ? une instance du 
programme identifie. Le systeme de courtage commande en permanence les 
instances multiples de chaque programme d 1 extension du serveur de maniere 
a assurer un f onctionnement ameliore du serveur sans surcharger les 
ressources du serveur. Le systeme de courtage pour demandes dans le Web 
garde un nombre minimum d' instances du programme identifie en memoire, 
chacune de ces instances etant executee dans son propre espace adresse. 
Le systeme determine si une instance du programme identifie est 
disponible dans un nombre existant d 1 instances, et met en route 
selectivement une nouvelle instance du programme si aucune autre instance 
n'est disponible. Si aucune instance n'est disponible et que le nombre 
d' instances depasse le nombre maximum prescrit, le systeme de courtage de 
demandes Web en informe le recepteur Web pour que ce dernier envoie via 
le reseau une reponse signalant que la demande n ! a pas ete traitee. 

Fulltext Availability: 
Detailed Description 
Claims 

Detailed Description 

location for the stored program used to initiate instances of the 
program 20. 

The dispatcher plug - in 30 determines in step 56 if the request 
object type (e.g., the virtual path specified in the client request) 
corresponds to an identifiable program. . . 

Claim 

said instances of the corresponding program. 

35 The server of Claim 28, wherein the dispatcher plug - in includes a 
configuration library identifying for each of the programs the 
corresponding object type and the prescribed number of instances. 

36 The server of Claim 28, wherein the object type of the request 
includes a virtual path specifying the identified one program. 
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English Abstract 

A system for providing advertisements from a central server to viewers 
(10) who access web sites (14). The central server stores both 
advertisements (16A) which are to be displayed and an information data 
base (16B) . The data base (16B) includes information about viewers, 
information about the characteristics of particular web sites and other 
information relevant to which advertisements should be displayed for 
particular viewers. Proposed bids submitted by different advertisers are 
evaluated in real time in order to determine which particular 
advertisement will be displayed to a viewer. Each proposed bid can 
specify a price or amount that the advertiser is willing to pay for the 
opportunity to display an advertisement to a viewer who has a particular 
set of characteristics and on a web site (14) and web page (12) that 
meets a particular set of criteria. The system includes a web server 
system (16) which has data bases, bidding agents (30) which compare the 
characteristics of view-ops to the specifications in proposed bids and 
which submit bids as appropriate, and bid selection logic which decides 
which bid to accept for each particular view-op. 

French Abstract 

Cette invention concerne un systeme permettant d'offrir des annonces 
publicitaires depuis un serveur (10) central a des utilisateurs qui 
accedent a des sites du reseau (14). Le serveur central comprend des 
annonces publicitaires (16A) devant etre affichees, ainsi qu'une base de 
donnees (16B) contenant des informations. Cette base de donnees (16B) 
comprend des informations qui se rapportent aux utilisateurs, des 
informations concernant les caracteristiques de sites particuliers du 
reseau, ainsi que d'autres informations portant sur les annonces 
publicitaires que 1 ' on souhaite fournir a des utilisateurs particuliers. 
Les offres qui sont faites par differents publicitaires sont evaluees en 
temps reel de maniere a determiner quelle sera 1 1 annonce qui sera envoyee 
a 1'utilisateur . Chaque off re peut comprendre le prix ou la somme que le 
publicitaire est pret a payer pour afficher son annonce, que ce soit pour 
un utilisateur ayant un ensemble particulier de caracteristiques ou sur 
un site (14) et sur des pages (12) du reseau qui repondent a un ensemble 
particulier de criteres . A cette fin, ce systeme comprend les elements 
suivants: un systeme de serveur de reseau (16) dans lequel sont stockees 
des bases de donnees; des agents faisant des offres (30) qui vont 
comparer les caracteristiques de fonctions de visualisation aux 
specifications indiquees dans les offres, puis soumettre ces offres de 
maniere appropriee; et un circuit logique de selection des offres qui va 
decider quelle offre doit etre acceptee pour chaque fonction de 
visualisation particuliere . 
Fulltext Availability: 
Detailed Description 



Detailed Description 

deliver the view-op to the system kernel in view server 320; receive 
the system kernel reply and deliver the content 

This is a multi-task operation. The contents (the IP data) of each view 
op, along with its type (either a request for content or a 
click-through) are delivered to the view server 320. This 
communication is through shared memory or alternatively it 
may be through a conventional... 
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English Abstract 

The present invention provides systems and methods for electronic 
commerce including secure transaction management and electronic rights 
protection. Electronic appliances such as computers employed in 
accordance with the present invention help to ensure that information is 
accessed and used only in authorized ways, and maintain the integrity, 
availability, and/or confidentiality of the information. Secure 
subsystems used with such electronic appliances provide a distributed 
virtual distribution environment (VDE) that may enforce a secure chain of 
handling and control, for example, to control and/or meter or otherwise 
monitor use of electronically stored or disseminated information. Such a 
virtual distribution environment may be used to protect rights of various 
participants in electronic commerce and other electronic or 
electronic-facilitated transactions. Secure distributed and other 
operating system environments and architectures, employing, for example, 
secure semiconductor processing arrangements that may establish secure, 
protected environments at each node. These techniques may be used to 
support an end-to-end electronic information distribution capability that 
may be used, for example, utilizing the "electronic highway". 

French Abstract 

Systemes et procedes destines au domaine du commerce electronique, et 
notamment a la gestion securisee des transactions et a la protection 
electronique des droits. Les appareils electroniques tels que les 
ordinateurs utilises conformement a la presente invention permettent 
d' assurer que les informations ne sont consultees et exploitees que de 
maniere autorisee, et ils conservent l'integrite, la disponibilite et/ou 



le caractere confidentiel des informations. Les sous -syst ernes securises 
utilises en association avec de tels appareils electroniques constituent 
un environnement de distribution virtuel distribue (VDE) apte a imposer 
une chaine securisee de traitement et de commande, par exemple pour la 
commande et/ou la mesure ou encore le controle de 1 1 utilisation 
d 1 informations stockees ou dif fusees electroniquement . Cet environnement 
de distribution virtuel peut servir a proteger les droits de differents 
individus impliques dans le commerce electronique et dans d'autres 
transactions electroniques ou assistees par des moyens electroniques. On 
a egalement prevu des environnements et architectures de systeme 
d 1 exploitation distribues, securises et autres mettant en oeuvre, par 
exemple, des ensembles de traitement securise a semi-conducteurs pouvant 
etablir des environnements securises et proteges au niveau de chaque 
noeud. Ces techniques peuvent servir de soutien pour une fonction 
electronique de distribution d 1 informations de bout en bout, cette 
fonction etant utilisable, par exemple, dans le domaine de l ,n autoroute 
electronique" . 

Fulltext Availability: 
Detailed Description 

Detailed Description 

... processing a particular object 300, a 

Particular authorized user, and a particular "right" (i.e., type of 
event) . These three parameters may be passed to SPE 503. Part 
of SPE kernel /dispatcher 552 executing within a "channel 0" 
constructed by low level services 582 during a... 
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English Abstract 

A host data processing system which includes a plurality of input/output 
devices operates under the control of an enhanced version of the UNIX 
operating system. The host system includes an emulator which runs as an 



application process for executing user emulated system <ES) application 
programs. The emulator includes a number of emulated system executive 
service components operating in shared memory and an interpreter, an 
emulator monitor call unit (EMCU) and a number of server facilities 
operating in the host memory. The ES executive service command handler 
and file management components are extended to accommodate to allow 
creation and access to linked files within both host and emulated system 
files. The server facilities include mechanisms for performing trusted 
user level validation when a command invokes the access of such a linked 
file and access checking at file access time which ensures security 
relative to preventing both unauthorized user access and compromises in 
host file system data by improper use of linked files. 

French Abstract 

Un systeme informatique central, qui comprend plusieurs dispositifs 
d' entree/sortie, fonctionne sous la commande d'une version amelioree du 
systeme d 1 exploitation UNIX. Ce systeme central comporte un emulateur qui 
fait tourner une procedure d 1 application permettant d'executer des 
programmes d' applications d' utilisateur propre au systeme emule. Cet 
emulateur comprend plusieurs composantes de services superviseurs de 
systeme emule qui fonctionnent en memoire partagee, et un interprete, un 
module d'appel de controle d f emulateur, et plusieurs serveurs 
fonctionnant dans la memoire centrale. Les composantes de traitement des 
commandes et de gestion des fichiers des services superviseurs du systeme 
emule sont elargies pour permettre la creation et l ! acces, concernant des 
fichiers connectes, depuis des fichiers du systeme central et du systeme 
emule. Les serveurs comportent des mecanismes qui permettent de valider 
un niveau d 1 utilisateur fiable, quand une commande implique l'acces a un 
tel fichier connecte, et qui permettent de controler l ! acces au moment de 
l'acces au fichier, ce qui assure une securite permettant d'eviter un 
acces illicite d ' utilisateur et des atteintes aux donnees systeme propres 
au fichier central du fait d ! une utilisation incorrecte des fichiers 
connectes . 

Fulltext Availability: 
Detailed Description 
Detailed Description 

... IORB and examining the "device type field." If the "device type field" 
indicates that a server does not exist for this type of request , 
then DSH92 creates a server and passes the request to the assigned 
server via MQI . That is, DSH92 issues fork and exec system calls to the 
kernel manager 70 which spawns a new host process running LK file or LK 
pipe server. . . 
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English Abstract 

A personal computer subsystem (20), having a hardware module (20B) and 
protection software (20A) , is designed to protect files on a personal 
computer from inadvertent or intentional distortion, and can be used to 
protect personal computers from programs known as computer viruses. The 
hardware module (20B) is connected to the personal computer system busses 
(50, 52, 54) and the software (20A) has a kernel which ensures the 
security of one access path (4 6A, 46B, 46C, 46D) to the hard disk 
controller (30) and utilizes the above-mentioned module (20B) to block 
other access paths (34, 36, 38, 40, 42, 44) to the hard disk controller 
(30) . The only permitted access path (46A, 46B, 46C, 46D) to the hard 
disk controller (30) is a path which uses the computer's operating system 
(24), modular device driver (26) and basic input/output system (28). All 
other access paths (34, 36, 38, 40, 42, 44) to the hard disk controller 
(30) are interpreted by the personal computer subsystem (20) as 
forbidden. 

French Abstract 

Un sous-systeme (20) d 1 ordinateur personnel dote d f un module materiel 
(20B) et d'un logiciel de protection (20A) est concu pour proteger les 
fichiers d'un ordinateur personnel contre l f alteration involontaire ou 
intentionnelle, et peut etre utilise pour proteger les ordinateurs 
personnels contre des programmes connus sous le nom de virus 
inf ormatiques . Le module materiel (20B) est connecte aux bus systeme (50, 
52, 54) de I 1 ordinateur personnel, le logiciel (20A) comporte un noyau 
qui assure la protection d ! une voie d'acces (46A, 46B, 46C, 46D) au 
controleur du disque dur (30) et utilise le module susmentionne (20B) 
pour bloquer les autres voies d'acces (34, 36, 38, 40, 42, 44) au 
controleur du disque dur (30). La seule voie d'acces autorisee (46A, 46B, 
46C, 46D) au controleur du disque dur (30) est une voie qui utilise le 
systeme d 1 exploitation (24), le pilote du dispositif modulaire (26) et le 
systeme entree/sortie de base (28) de 1 ' ordinateur . Toutes les autres 
voies d'acces (34, 36, 38, 40, 42, 44) au controleur du disque dur (30) 
sont interpretees par le sous-systeme (20) de l 1 ordinateur personnel 
comme etant interdites. 

Fulltext Availability: 
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Detailed Description 
modular device 

driver and the BIOS-level request check program. Further 
functioning of the protection kernel is initiated by 
information requests from the application program 22, and 
depends on the type of request . The protection kernel 
supplements the file protection measures performed by the OS 

kernel , and grants the protection control program the 
privilege of changing the status of files. 



The... the original 

handler of the 13h modular device driver interrupt* Further 
functioning of the protection kernel is initiated by 
information requests from the application program 22, and 
depends on the type of request . The protection kernel 
supplements the file-protection measures performed by the OS 
24 kernel , and grants the protection control program the 
privilege of changing the status of files. 
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The data processing system of client/ server architecture 
operating on a message basis includes client spaces capable of issuing 
processing requests in the form of messages, and server spaces for 



executing the processing as requested by checking a request code 
contained in the message. The request codes are previously 
classified into client-space dedicated codes and kernel -space 
dedicated codes. 

A message communication facility performs message transfer between 
the clients and the servers and includes a check function for 
checking whether the message originates in the kernel space when the 
request code contained in the message is the kernel -space dedicated 
code. The processing request message is issued from a space other than 
the kernel space by using the kernel space dedicated code which is 
rejected as an error. 

ADVANTAGE - Assures security of system. 

Dwg. 1/7 
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Abstract (Basic) : EP 463943 A 

The apparatus is characterised by a request logic circuit coupled 
to each requester. A grant logic circuit is coupled to each type of 
resource. Thus a number of request logic circuits and grant logic 
circuits are formed. 

A broadcast medium is used for transferring information amongst 
the request logic circuits and the grant logic circuits. Requesters are 
queued if a resource is not available. However, when the resource 
becomes available, the requester next in line, is connected to the 
resource . 

USE/ADVANTAGE - Computer LAN or telephone WAN. Electronic system 
arbitration for one or more shared resources. Fast arbiter capable of 
being easily scaled to both large numbers of requesters and large 
numbers of types of resources. 
Dwg .1/6 

Abstract (Equivalent): US 5418967 A 

The computer system includes an arbitration mechanism for granting 
access through a resource access path. The system has a number of 
requesters, and different types of resources. A number of request 
processing units are each associated with each requesters, for 
receiving a resource type request signal from the associated 
requester. A number of grant processing units are each associated with 
each resource for monitoring an associated status signal. 

A common broadcast medium is coupled to the request processing 
units and the grant processing units. An arbiter grants access to the 
common broadcast medium to one of the request processing units and 
grant processing units. The request processing units and the grant 
processing units muse the common broadcast medium to control the order 
of coupling between the resources and the requesters in a first come, 
first served manner. A controller couples the resources to the 
requesters through the resource access path in the order controlled by 
the request processing unit and the grant processing units. 

ADVANTAGE - Fast arbiter is easily scaled to large numbers of 
request units and large number of resources. Efficient switching for 
short connect times. 

Dwg. 5/6 

US 5265257 A 

The fast arbiter handles a large number of types of resources with 
multiple instances of each type of resource. During a first cycle a 
request logic circuit broadcasts a request for a preselected type 
of resource onto a broadcast medium. During a second cycle a grant 
logic circuit broadcasts a queue position onto the broadcast medium for 
the preselected type of resource. Also, during the second cycle the 
request logic circuit stores the queue position. 

After an asynchronous wait for an instance of the requested type of 
resource to become, free, a third cycle begins wherein the first grant 
logic circuit broadcasts an indication that a free instance of the 
preselected type of resource is available. During a fourth cycle the 
requester is granted access to the free instance of the preselected 
type of resource. 



USE - For computer or communication system including telephone 
system. 

Dwg. 1/6 

US 5313641 A 

A number of requests processing units are provided, one associated 
with each one of the requesters, for receiving a resource type 
request signal from the associated requester. A number of grant 
processing units are provided, one associated with each one of the 
resources, for monitoring a busy status signal form the associated 
resource . 

A common broadcast medium is coupled to the number of request 
processing units and the grant processing units. An arbiter grants 
access to the common broadcast medium to one fo the request processing 
units and the grant processing units using the common broadcast medium 
to control the coupling order between the requesters and the resources 
in a first come, first served manner. 

USE /ADVANTAGE - Arbitration mechanism for controlling coupling 
order between number of resources and number of requesters. 

Dwg. 3/6 

US 5303391 A ^ 
The plug - in logic board for use in an arbitration mechanism 
comprises a request processing unit (40) coupled to a common broadcast 
medium, a grant processing unit (42) coupled to the common broadcast 
medium, and an input /output unit (401) adapted to be coupled to an 
electronic operating device (402) . The input/output unit inputs a 
resource type request signal (22) received from the electronic 
operating device (402) to the request processing unit (40), inputs a 
status signal (28) received from the electronic operating device (402) 
to the grant processing unit (42) and outputs a grant signal (26) 
received from the request processing unit to the electronic operating 
device . 

A further device responsive to the resource type request signal 
(22), status signal (28), and grant signal (26), couples a requester 
type electronic operating device to a resource type electronic 
operating device using a resource access path (14). 

USE /ADVANTAGE - Provides fast arbiter capable of being easily 
scaled to both large numbers of requesters and large numbers of types 
of resources where there are multiple instances of each type of 
resource . 

Dwg. 5/6 

Title Terms: ELECTRONIC; ARBITER; SYSTEM; SHARE; RESOURCE; REQUEST; LOGIC- 
CIRCUIT; LOGIC; CIRCUIT; ARBITER; ONE; MORE; RESOURCE 
Derwent Class: T01 

International Patent Class (Main): G06F-013/00; G06F-013/14; G06F-013/362 
International Patent Class (Additional) : G06F-013/36; H04L-005/14 
File Segment: EPI 

Manual Codes (EPI/S-X) : T01-H05B3; T01-M02 
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DIALOG (R) File 350: Derwent WPIX 
(c) 2004 Thomson Derwent. All rts. reserv. 

004830222 

WPI Acc No: 1986-333563/198651 

XRPX Acc No: N86-248745 

Multi-port communication adaptor - utilises user -programmable plug - in 
programming cartridge for defining individual communication port data 
service characteristics 

Patent Assignee: INT BUSINESS MACHINES CORP (IBMC ); IBM CORP (IBMC ) 
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Priority Applications (No Type Date) : US 85744851 A 19850614 

Cited Patents: 2.Jnl.Ref; A3... 8934; EP 6436; EP 79698; No-SR.Pub; US 

4246637; US 4275440; EP 173809 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 205010 A E 57 

Designated States (Regional) : DE FR GB IT 
EP 205010 Bl E 59 G06F-013/32 

Designated States (Regional) : DE FR GB IT 
DE 3688763 G G06F-013/32 Based on patent EP 205010 

Abstract (Basic) : EP 205010 A 

A processor has data and address busses to which is connected a 
control and arbitration unit having a DMA, interrupt data transfer 
request arbitrator and a controller DIAC. Interrupt control logic is 
connected to the processor and to the DIAC and a memory is connected to 
the busses. At least one port interface communicator is connected to a 
communication, link and presents data transfer service request signals 
to the DIAC which is connected to the processor via the busses. 

The DIAC arbitrates among the data transfer service requests, 
identifies the requests by port and selects the highest presently 
requesting priority port's service request. In response, the DIAC 
presents either an interrupt or DMA request to the processor in 
accordance with the data received from the processor. The data defines, 
for each port, the type of request to be presented to the processor 
by the DIAC. 

ADVANTAGE - Is capable of communicating via different modes or 
protocols on various lines and of accessing memory in controller in 
various ways that may be most advantageously matched to needs of given 
port or protocol 
Abstract (Equivalent): EP 205010 B 

Apparatus to be used as a multi-port communications adapter 
comprising: a processor (5) having a data bus and an address bus 
connected thereto; control and arbitration means comprising a DMA and 
interrupt data transfer request arbitration and controller DIAC means 

(3) connected to said address and data buses; at least one port 
interface communications means (2), each one being connected to a 
communications link (1) for transmitting or receiving signals thereon; 
an interrupt control logic means (4) being connected to said processor 

(5) and to said DIAC means (3); and a memory means (6) being connected 
to said buses; each said port interface communication means (2) 
comprising a means for presenting data transfer service request signals 
to said DIAC (3) ; said DIAC means (3) being connected to receive said 
data transfer service request signals and being connected to said 
processor means via said buses for receiving data and addresses 
thereon; said DIAC means (3) comprising a first and a second 
arbitration means (30, 36) each arbitrating among said data transfer 
service requests, identifying the requests by ports and selecting the 
highest presently requesting priority port s service request and 



responsive thereto presenting respectively an interrupt or a DMA 
request to said processor (5), each of said first and said second 
arbitration means (30, 36) comprising programmable enabling means {50, 
69) for respectively enabling a request in the first arbitration means 
(30) as a DMA request or in the second arbitration means (36) as an 
interrupt request . 
(Dwg. la/14 
) 

Abstract (Equivalent) : US 4751634 A 

The adapter utilises a user programmable pluggable programming 
cartridge for defining individual communications port data service 
characteristics. The port data service characteristics are interpreted 
by a microprocessor which manages the interchange from port to port and 
to or from memory or a host system. Direct memory access or interrupt 
driven memory access modes of operation are individually selectable for 
each individual in bound and out bound communications channel. The 
communications protocols at each port may be of any standard type with 
the microprocessor in the adapter making the appropriate conversion. 
Communication speeds can be automatically recognised and matched for 
each port. 

An arbitration processor for both DMA and driven data transfer 
services is included as the heart of the adapter to provide the 
capability of individualised control over each in bound and out bound 
channel mode of data transfer service for the optimum mode of operation 
for each port and type of data service required. (47pp 
Title Terms: MULT I ; PORT; COMMUNICATE; ADAPT; UTILISE; USER; PROGRAM; PLUG; 
PROGRAM; CARTRIDGE; DEFINE; INDIVIDUAL; COMMUNICATE; PORT; DATA; SERVICE; 
CHARACTERISTIC 
Derwent Class: T01 

International Patent Class (Main) : G06F-013/32 

File Segment: EPI 

Manual Codes (EPI/S-X) : T01-H09 
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15/3, K/4 (Item 2 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

04799151 Supplier Number: 47061848 (USE FORMAT 7 FOR FULLTEXT) 
CHECK POINT PREPARES FIREWALL- 1 V3 
Network Briefing, n258, pN/A 
Jan 24, 1997 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal; Trade 
Word Count: 257 

the HTTP, SMTP and FTP protocols, and for each connection 
established through a Firewall-1 server the network administrator is 
able to control specific access according to fields that belong to the 
specific services: URLs, filenames, FTP commands and types of requests 
A new CVP Content Vectoring Protocol is said to enable the integration of 
external and third-party content screening software in a 1 plug - in 1 



manner. 

The CVP was developed with and supported by content security vendors 
Cheyenne Software Inc.. 



15/3, K/5 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

04782477 Supplier Number: 47039099 (USE FORMAT 7 FOR FULLTEXT) 
CHECK POINT SOFTWARE OFFERS FURTHER CONTENT AWARE FEATURES IN THE LATEST 
VERSION OF ITS FIREWALL- 1 

Computergram International, n3078, pN/A 
Jan 15, 1997 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 265 

(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

. ..Inc, Ramat-Gan, Israel is due to launch version 3.0 of its Firewall-1 
network security software in the first week of February, offering more 
content-aware features, including anti... 

...Mail Transfer and File Transfer Protocols, and for each connection 
established through a Firewall-1 server the network administrator is 
able to control specific access according to fields that belong to the 
specific services: Resource Locators, file names, File Transfer Protocol 
commands and types of requests . A new CVP Content Vectoring Protocol is 
said to enable the integration of external and third-party content 
screening software in a 1 plugin ' manner. The new Protocol was developed 
with and supported by content security vendors Cheyenne Software... 

...of applets through the firewall to protect against the most common and 
other known Java network attacks. Checkpoint's Firewall-1 product aims to 
offer its users full and quick network connections for all applications 
and protocols, at full bandwidth speeds and without needing a massive 
server . Check Point says it can offer this as a result of its Stateful 
Multi-layer . . . 



15/3, K/6 (Item 1 from file: 47) 

DIALOG (R) File 47: Gale Group Magazine DB(TM) 
(c) 2004 The Gale group. All rts. reserv. 

04780191 SUPPLIER NUMBER: 19577083 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

OpenTrap eavesdrops on Windows. (PC Magazine utility) (includes related 
article on accessing PC Magazine Online) (Technology Information) 

Wolking, Gregory A.; Knoblaugh, Rick 
PC Magazine, vl6, nl3, p281(4) 
July, 1997 

ISSN: 0888-8507 LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 4136 LINE COUNT: 00320 

... in easily readable form. 

LOW-LEVEL PROCESSING 

To eavesdrop on file opening functions, we must plug in at the 
system level. In DOS, a hook into INT 21h would be the obvious... 

...When calls occur, Functrap f s installed hook procedure is called with 



parameters that indicate the type of request , the accessed drive, and 
other information (through a pointer to an IFS I/O request... 



15/3, K/10 (Item 3 from file: 148) 

DIALOG (R) File 148: Gale Group Trade & Industry DB 
{c)2004 The Gale Group. All rts. reserv. 

09019432 SUPPLIER NUMBER: 18725067 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

DFS brings shares together but still needs work. (Distributed File System 
for Windows NT Server 4.0) (Software Review) (Evaluation) 

Symoens, Jeff 

InfoWorld, vl8, n40, pNl(l) 
Sep 30, 1996 

DOCUMENT TYPE: Evaluation ISSN: 0199-6649 LANGUAGE: English 

RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 888 LINE COUNT: 00073 

...ABSTRACT: s new Distributed File System (DFS) for Windows NT Server 4.0 
is a powerful add - on utility that lets users view a distributed network 
file structure as a single resource in. . . 

...for files transparently, covering several servers with a single command 
or action. DFS redirects user requests to any volume type accessible 
with a Windows NT redirector. It has some significant drawbacks, requiring 
users to install both client-side and server -side software and supporting 
only 32-bit platforms. There are also a few performance problems... 

15/3,K/12 (Item 1 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

02251486 SUPPLIER NUMBER: 53378683 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

The Windows Driver Model Simplifies Management of Device Driver I/O 
Requests. (Product Information) (Abstract) 

Peretz, Ervin 

Microsoft Systems Journal, 14, 1, 45(1) 
Jan, 1999 

DOCUMENT TYPE: Abstract ISSN: 088 9-9932 LANGUAGE: English 

RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 554 0 LINE COUNT: 00507 

...ABSTRACT: a single I/O action. The I/O-initiating driver initializes 
the IRP with the request type , optional completion routine, and 
input /output buffer for the action. 

... specific features of the camera currently attached to the USB port. 

An IRP is a kernel or driver-allocated structure representing a 
single I/O action. The I/O-initiating driver initializes the IRP with the 
request type , optional completion routine, and input/output buffer for 
the action. It then passes a pointer... 



15/3, K/13 (Item 2 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

01941508 SUPPLIER NUMBER: 18286886 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Database vendors target the Internet . (Gupta Technologies 1 Centura Ranger 
DBMS utility, Centura Web Data Publisher Internet/Web server software and 



Centura Team Developer application development software; Powersoft's 
Optima++ application development software and PowerBuilder DBMS) (includes 
related article on Working Set's DataRamp Internet access 
software) (Product Announcement) 

Fuller, Arthur 

Data Based Advisor, vl4, n6, p62(6) 
June, 1996 

DOCUMENT TYPE: Product Announcement ISSN: 074 0-5200 LANGUAGE: 

English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 4195 LINE COUNT: 00340 

... processing capabilities of its own. In this case, Zurek says, "the 

application resides on the server side and communicates with the browser 
strictly with HTML/CGI requests . " This type of client uses no embedded 
extension support, such as Netscape plug - ins or Microsoft OLE controls. 
"For this type of application, Powersoft will provide the ability to... 

...do anything permitted in the PowerBuilder environment, including acting 
as clients to other PowerBuilder object servers , or communicating 
directly with a database and sending the information back to the client 
using. . . 



15/3, K/14 (Item 3 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

01550974 SUPPLIER NUMBER: 13079341 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Software for the HP EISA SCSI card. (Extended Industry Standard 

Architecture, Small Computer System Interface cards for HP's 9000 Series 
700 workstations) (includes related articles on SCSI standard and on 
interruption of NCR Corp. 1 s 53C710 chip) (Technical) 

Thomas, Bill; Berkema, Alan C; Tausheck, Eric G.; Mahaffy, Brian D. 

Hewlett-Packard Journal, v43, n6, p97(12) 

Dec, 1992 

DOCUMENT TYPE: Technical ISSN: 0018-1153 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 10531 LINE COUNT: 00810 

and the interface card. Each I/O request may involve different 
layers depending on the kind of request and type of device. Fig. 1 
shows the architecture for the EISA SCSI software drivers. In this 
architecture the HP-UX kernel , on behalf of a user process, starts an I/O 
operation by invoking a peripheral... 



15/3, K/18 (Item 7 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

01255393 SUPPLIER NUMBER: 07036967 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Boot mechanism for discless HP-UX. (technical) 
Scott, Perry E.; Marvin, John S.; Quist, Robert D. 
Hewlett-Packard Journal, v39, n5, p33(4) 
Oct, 1988 

DOCUMENT TYPE: technical ISSN: 0018-1153 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 324 8 LINE COUNT: 00248 



.ABSTRACT: boot ROM user interface, and boot ROM read interface. The 



server boot modules handle five types of remote boot requests , support 
four levels of error and information logging, and contain the communication 
protocol and the secondary loading operation. Discless kernel debugging 
and initialization are also described. 



15/3,K/20 (Item 9 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

0124284 6 SUPPLIER NUMBER: 06537073 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

An examination of the DevHlp API. (writing OS-2 bimodal device drivers) 
(technical) 

Duncan, Ray 

Microsoft Systems Journal, v3, n2, p39(17) 
March, 1988 

DOCUMENT TYPE: technical ISSN: 0889-9932 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 5778 LINE COUNT: 004 4 9 

removed from the data stream. 
From the driver's point of view, it informs the kernel that it is 
prepared to support monitors by issuing the DevHlp call MonitorCreate, 
which establishes... 

...application is attempting to register as a monitor by the receipt of a 
special IOCTL request packet ( Category 0AH Function 40H) ; it then calls 
the DevHlp service Register, which causes the kernel ! s monitor dispatcher 
to insert the application's buffers into the monitor chain at the... 
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20/7/1 (Item 1 from file: 2) 

DIALOG (R) File 2: INSPEC 

(c) 2004 Institution of Electrical Engineers. All rts. reserv. 

6998831 INSPEC Abstract Number: C2001-09-6150J-012 

Title: The influence of the structure and sizes of jobs on the performance 
of co-allocation 

Author (s): Bucur, A.I.D.; Epema, D.H.J. 

Author Affiliation: Fac. of Inf. Technol . & Syst . , Delft Univ. of 
Technol . , Netherlands 

Conference Title: Job Scheduling Strategies for Parllel Processing. IPDPS 
2000 Workshop, JSSPP 2000. Proceedings (Lecture Notes in Computer Science 
Vol.1911) p. 154-73 

Editor (s): Feitelson, D.G.; Rudolph, L. 

Publisher: Springer-Verlag, Berlin, Germany 

Publication Date: 2000 Country of Publication: Germany 207 pp. 
ISBN: 3 540 41120 8 Material Identity Number: XX-2001-00285 

Conference Title: Job Scheduling Strategies for Parallel Processing. IPDS 
2000 Workshop, JSSPP 2000. Proceedings 

Conference Date: 1 May 2000 Conference Location: Cancum, Mexico 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: Over the last decade, much research in the area of scheduling 
has concentrated on single cluster systems. Less attention has been paid to 
multicluster systems, although they are gaining more and more importance in 
practice. We propose a model for scheduling rigid jobs consisting of 
multiple components in multicluster systems by pure space sharing, based on 
the Distributed ASCI Supercomputer. Using simulations, we asses the 
influence of the structure and sizes of the jobs on the system's 
performance, measured in terms of the average response time and the maximum 
utilization. We consider three types of requests , total requests , 
unordered requests and ordered requests, and compare their effect on the 
system's performance for two scheduling policies, first-come-first-served, 
and fit-processors-first-served, which allows the scheduler to look further 
in the queue for jobs that fit. These types of job requests are 
differentiated by the restrictions they impose on the scheduler and by 
the form of co-allocation used. The results show that the performance 
improves with decreasing average job size and when fewer restrictions are 
imposed on the scheduler. (13 Refs) 

Subfile: C 

Copyright 2001, IEE 
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Conference Title: Proceedings. 19th IEEE International Conference on 
Distributed Computing Systems 
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Abstract: Replication of information among multiple World Wide Web 
servers is necessary to support high request rates to popular Web sites. A 
clustered Web server organization is preferable to multiple independent 
mirrored servers because it maintains a single interface to the users and 
has the potential to be more scalable, fault-tolerant and better 
load-balanced. In this paper, we propose a Web cluster architecture in 
which the Domain Name System (DNS) server, which dispatches the user 
requests among the servers through the URL name to the IP address mapping 
mechanism, is integrated with a redirection request mechanism based on 
HTTP. This should alleviate the side-effect of caching the IP address 
mapping at intermediate name servers. We compare many alternative 
mechanisms, including synchronous vs. asynchronous activation and 
centralized vs. distributed decisions on redirection. Moreover, we analyze 
the reassignment of entire domains or individual client requests , 
different types of status information and different server selection 
policies for redirecting requests. Our results show that the combination of 
centralized and distributed dispatching policies allows the Web server 
cluster to handle high load skews in the WWW environment. (11 Refs) 
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Abstract: Satellite autonomous control computer systems mainly control 
the posture and orbit of the satellites. It can also deals with the 
intelligent control and operation program for the relevant parts of the 
satellites. The recent trend in operating system development is the 
adoption of microkernel architecture which holds such advantages as 
microminiaturization, modularity, portability and extendibility . In this 
paper, a new object-oriented real-time I/O subsystem model has been 



designed. In this model, the traditional I/O subsystem framework is 
discarded and a stream mechanism based on the object-oriented concept is 
introduced. In addition, the I/O requests are classified according to 
their time emergency to obtain real-time performance. So, this model meets 
the satellite performance requirements as reliability, flexibility, 
portability and real-time performance. (5 Refs) 
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Abstract: The popularity of intranets is raising the performance bar for 
workgroup servers. These machines must do more than just provide access to 
data and images inside and outside of relational database systems. They are 
also required to carry out these duties by speaking the language of Web 
browsers. The current crop of dual-processor PC servers based on Intel 
Corp.'s Pentium Pro chip are increasingly being utilized as intranet 
servers for workgroups within large organizations and at entire smaller 
companies. As a group, these machines seem to do a good job of hosting an 
intranet with up to 360 clients. But when the load reaches 4 80 clients, 
performance falls off dramatically. To address the requirements of 
intranets, the author tested four similar dual-processor Pentium Pro 
systems: the PowerEdge 4100/200 from Dell Computer Corp.; the NetServer LH 
Pro from Hewlett-Packard Co.; the PC server 330 from IBM Corp.; and the 
Express 5800 LE2000 from NEC computer systems division. They were selected 
as representative of the dual-processor Pentium Pro marketplace. (Compaq 
Computer Corp. declined to participate.) The systems were tested running 
Client /Server Labs Inc.'s IntraMarkl benchmark, which measures performance 
by simulating a mixture of the most important types of Web server 
requests . (0 Refs) 
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ComSoc 

Conference Date: 23-27 June 1996 Conference Location: Dallas, TX, USA 
Language: English Document Type: Conference Paper (PA) 
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Abstract: This paper originates an economic model for pursuing bandwidth 
allocation in broadband communication networks (with particular reference 
to multimedia communication) . A user, who requests a certain type of 
connection service, will consume network resources (e.g. bandwidth). Each 
connection is associated with quality-of-service (QoS) requirement. A 
utility is defined for each user which reflects his satisfaction level over 
QoS provided by the network. Some reasonable assumptions are made on this 
utility. Then we formulate the bandwidth allocation of one ATM component 
into virtual paths (VPs) as a noncooperative game. Each VP requests the 
amount of bandwidth such that its users' satisfaction will be maximized. 
Two cases, namely unconstrained and constrained, are considered. On the 
other hand, the problem may be formulated as a cooperative game. The 
objective is to find an optimal bandwidth allocation such that the total 
utility of one ATM component will be maximized. Alternatively, the 
objective is to maximize the minimum utility among ATM VPs. It is shown 
that these two game problems may have the same solution for unconstrained 
case. (14 Refs) 
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Conference Date: April 1996 Conference Location: Montreal, Que., 
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Language: English Document Type: Conference Paper (PA) 
Treatment: Theoretical (T) 

Abstract: This paper presents resource management for broadband 
communication networks from an economic point of view. To be specific, we 
consider bandwidth allocation and buffer dimensioning. A pricing scheme is 
also proposed to be dependent on the amount of allocated bandwidth and 
buffer space. Firstly, we exploit the utility function to represent 



satisfaction level of a user who requests a certain type of connection 
service from the network . Then we address the problem of how to allocate 
bandwidth and buffer capacity of one network component into virtual paths 
(VPs) . On the one hand, the problem is formulated as a non-cooperative 
K-person game. Two cases, namely unconstrained and constrained, are 
considered. On the other hand, the problem may be formulated as a 
cooperative game. The objective is to find an optimal resource allocation 
such that the total utility of one network component will be maximized. 
Alternatively, the objective is to maximize the minimum utility among VPs. 
It is shown that these two game problems may have the same solution for 
unconstrained case. (19 Refs) 
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Abstract: In this article we consider the method of sequential 
approximations of Kolmogorov equation system solution for non-stationary 
probabilities of states of Markov queueing networks with requests of 
different types . We examine the properties of sequential approximations. 
(3 Refs) 
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Abstract: The network traffic depends upon the types of requests 
from network users. Consequently, network traffic monitoring is 
sensitive to system workload caused by the users. In this project, we study 
the Ethernet traffic analysis and performance factors which affect the data 
receiving performance. In brief, we have accomplished the following: study 
of related Ethernet monitoring efforts; writing the sending and receiving 
programs above the NIT protocol; working through the Sniffer's network 
analyzer; and tests of the performance effects of variations on NIT buffer 
size, CPU power, and available memory space. The report of this project 
gives insight into the performance issues with, various system parameters, 
particularly in the file server's alternatives. (0 Refs) 
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Abstract: The authors consider a system of single user workstations 
connected to a file server over a local network. Users arrive at random 
intervals and occupy a workstation if one is available otherwise leave the 
system. Upon arrival,- the user issues a request for file transfer from the 
server to the workstation local memory. Subsequent requests for additional 
transfers are issued in a random manner as needed. They consider two 
priority schemes for scheduling the two types of requests at the file 
server . Assuming that all relevant intervals are exponentially 
distributed, they propose two queueing models for the two scheduling 
schemes and develop computational procedures to analyze the performance of 
the system. Illustrative examples are presented to study the system 
behavior under various load conditions and to compare the performance of 
the two scheduling disciplines. (21 Refs) 
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Abstract: Generalizes the method of successive approximation in order to 
determine the nonstationary state probabilities of Markov models of i 
computer networks with requests of different types , so that various 
transient responses can be determined. (7 Refs) 
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Abstract: Considers closed and open queuing networks consisting of M 
many-server nodes, for which the waiting times in the queues are bounded by 
exponentially distributed random variables, with exponentially distributed 
durations of servicing at the network nodes. The stationary distributions 
of the state probabilities of these networks are obtained. Recursion 
relations are given for obtaining an approximate solution for the state 
probabilities of the network at any point in time t, which employ the 
stationary distribution as their initial approximation. It is shown that it 
is possible to generalize the results to the case of similar networks 
with several types of requests . (7 Refs) 
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Abstract: The authors analyze a discrete-time single-server Geom/sub k/ 



mod Geom/sub k/ mod 1 mod R mod f/sub 0/ queuing system (QS) with several 
types of incoming requests. The time intervals between arrivals and the 
servicing durations are independent and distributed geometrically (the 
discrete analog of the exponential distribution) . Scalar and matrix 
relations are obtained for the distribution of the stationary state 
probabilities of the Markov chain describing the QS. It is shown that, as 
the discretization unit h tends to zero, the solution for an M/sub k/ mod 
M/sub k/ mod 1 mod R mod f/sub 0/ QS is obtained. A numerical example is 
given. (12 Refs) 
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Abstract: Presents a network control system for a time preassignment TDMA 
system using multiple transponders. Ordinarily storing and reading the 
numbered informations indicating the transponder and the timing of the 
burst position as the standard operation modes in the random access 
memories of the control equipment at each earth station, and necessarily 
rewriting the memories by the on-line command from the Network Control 
Center, this system can meet any kind of request to set up the network 
Control equipments use microprocessors to determine validity of many 
confused logics. (15 Refs) 
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Abstract : Presents a network control system for a time preassignment TDMA 
system using multiple transponders. Ordinarily, storing and reading 
numbered information, indicating the transponder and the timing of the 
burst position as standard operation modes in the random access memories of 
the control equipment at each earth station and necessarily rewriting the 
memories by the on-line command from the Network Control Center, this 
system can meet any kind of requests to set up the network . Control 
equipment uses microprocessors to judge many confused logics. (24 Refs) 
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appropriate to the particular type of retrieval system under investigation 
at the Linguistics Research Center, and to the particular problem of 
investigating the effects of controlled changes in indexing techniques 
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classification of types of request , and evaluation of system 
performance separately with reference to each type, and (b) the use of 
simulation techniques to permit rapid generation of experimental 
statistics . (Author) 
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Abstract: In this paper, we propose a gateway system for handling 
heterogeneous network management requests from diverse Integrated Network 
Management System (INMS)s. INMS requests management information for 
managing component resources through some management protocols such as 



Common Management Information Protocol (CMIP) and Simple Network Management 
Protocol (SNMP) . Electronics and Telecommunications Research Institute 
(ETRI) has developed ATM switching system as the main telecommunication 
node for B-ISDN. To connect ATM switches with integrated network management 
framework without any modification of ATM switches, we have to construct a 
request handling agent system or any types of management request 
handling server on proxy workstation. Our gateway system takes the role 
of layered architecture and information handling, so that it covers diverse 
management requests and information conversion from ATM proprietary to 
common management information. Based on these properties, the gateway 
system has the adaptability and extendibility for any type of management 
domains. In this paper, we will also introduce the initialization scheme of 
heterogeneous request handling agent system which is another role of 
gateway system. (Author abstract) 7 Refs. 
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Abstract: This paper originates an economic model for pursuing bandwidth 
allocation in broadband communication networks . A user, who requests 
certain type of connection services, will consume network resources 
(e.g. bandwidth). Each connection is associated with quality-of -service 
(QoS) requirement. A utility is defined for each user which reflects his 
satisfaction level over QoS provided by the network. Some reasonable 
assumptions are made on this utility. Then we formulate the bandwidth 
allocation of one ATM component into virtual paths (VPs) as a 
non-cooperative game. Each VP requests the amount of bandwidth such that 
its users 1 satisfaction will be maximized. Two cases, namely unconstrained 
and constrained, are considered. On the other hand, the problem may be 
formulated as a cooperative game. The objective is to find an optimal 
bandwidth allocation such that the total utility of one ATM component will 
be maximized. Alternatively, the objective is to maximize the minimum 
utility among ATM VPs. It is shown that these two game problems may have 
the same solution for unconstrained case. (Author abstract) 14 Refs. 
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Abstract: The network traffic depends upon the types of requestsO 
from network users. Consequently, network traffic monitoring is 
sensitive to system workload caused by the users. In this project, we study 
the Ethernet traffic analysis and performance factors which affect the data 
receiving performance. In brief, we have accomplished the followings: (1) 
study of related Ethernet monitoring efforts, (2) writing the sending and 
receiving programs above the NIT protocol, (3) working through the 
Sniffer's network analyzer, and (4) tests of the performance effects of 
variations on NIT buffer size, CPU power, and available memory space. The 
report of this project gives insight into the performance issues with 
various system parameters, particularly in the file server's alternatives. 
(Author abstract) 
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ISSN: 0169-7552 

Language: ENGLISH Document Type: ARTICLE 

Abstract: We consider a system of single user workstations connected to a 
file server over a local network. Users arrive at random intervals and 
occupy a workstation if one is available otherwise leave the system. 
Upon arrival, the user issues a request for file transfer from the 
server to the workstation local memory. Subsequent requests for 
additional transfers are issued in a random manner as needed. We 
consider two priority schemes for scheduling the two types of 
requests at the file server . 

Assuming that all relevant intervals are exponentially distributed, 
we propose two queueing models for the two scheduling schemes and 
develop computational procedures to analyze the performance of the 
system. Illustrative examples are presented to study the system 
behavior under various load conditions and to compare the performance 



of the two scheduling disciplines. 
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A LIGHTWEIGHT MIDDLEWARE ARCHITECTURE AND EVALUATION OF MIDDLEWARE 
PERFORMANCE (LIGHTWEIGHT SOFTWARE BUS, OBJECT REQUEST BROKER, DATA 
PROCESSING) 

Author: BALAY, RAJINI ISHWARIAH 
Degree: PH.D. 
Year: 1998 

Corporate Source/Institution: NORTH CAROLINA STATE UNIVERSITY (0155) 
Chairs: MLADEN A. VOUK; HARRY G. PERROS 

Source: VOLUME 59/08-B OF DISSERTATION ABSTRACTS INTERNATIONAL. 
PAGE 4234. 149 PAGES 

An important part of distributed applications is the communications 
middleware, which provides an interface between an application and the 
resources that it needs. General purpose middleware tends to provide 
functionalities that attempt to satisfy most of its users, due to which it 
is often bulky. This has prompted definition of the lightweight middleware 
concept. A middleware implementation can be lightweight in two respects: 
(1) a simple API, and (2) low performance overhead. This work explores this 
concept through implementation of the Lightweight Software Bus (LSB) . LSB 
allows synchronous and asynchronous communication between processes. It 
supports message, direct channel and socket interfaces, and allows 
integration of GUI-based processes. LSB performance is comparable to that 
of low-level BSD communication mechanisms. 

The overhead that middleware imposes on application messages 
determines its performance. This thesis presents some techniques to 
estimate middleware overhead and discusses factors that affect its 
performance. Specifically, (1) A simulation model was used to study LSB 
under different conditions of traffic intensity, traffic burstiness and 
numbers of clients in the system. LSB represents a system that supports 
synchronous and asynchronous communication between processes. A study of 
such a client/server system which took into account the middleware overhead 
has not been considered in literature so far. The results show that the 
delays in the middleware (a) increase with intensity in user traffic, (b) 
can actually decrease when the traffic is very bursty, depending on the 
behaviour of a client, and (c) can decrease with increasing numbers of 
clients, if new processors are introduced. (2) An experimental study was 
conducted to compare the end-to-end latency and throughput of LSB and the 
Common Object Request Broker Architecture (CORBA) . The results show that 
the lightweight architecture performs significantly better than 
CORBA-compliant middleware. (3) An in-depth study of the CORBA middleware 
was conducted to identify the distribution of request processing time among 
various ORB processing components. Estimates of CPU processing time for 
each category were also derived. The results identify how the major 
components, ORB core processing, data manipulation and object adapter 
processing vary with different input parameters like type of method 
invocation, request size and server operation. 
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A study of queuing systems with different- type requests in the transient 
mode 

(Eine Studie fuer Warteschlangensysteme mit Anforderungen unterschiedlicher 

Typen, das sich in einem Uebergangsvorgang befindet) 

Matalytskii, MA 

Grodno State Univ., Russia 

Automatic Control and Computer Sciences, v29, n5, pp55-58, 1995 
Document type: journal article Language: English 
Record type: Abstract 
ISSN: 0146-4116 

ABSTRACT : 

In the design of computer systems and networks, communication networks, and 
other objects, it is often necessary to model their current behavior and 
estimate their performance dependent on time. An essential aspect of this 
process is finding non-stationary probabilities of the states of their 
models-queuing networks. The method of successive approximations used to 
find such probabilities in case of a simple closed Markov network with 
single-line queues and similar-type requests has been described by Harrison 
(1981). Harrison's results were extended to networks with different 
requests. The present study is concerned with finding, in the transient 
mode, the probabilities of states of Markov networks with multiline queuing 
systems and different-type requests. We consider the case where the state 
of a network is defined by the vector of the number of requests on queue, 
and the case where the network state is defined as the vector of 
distribution of requests among the queues that takes into account their 
type. 

? t20/7/50-51, 56-60 
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Die Realisierung von OSI. Am Beispiel von FTAM in einem Kundenpro jekt . Teil 

5 

(Realisation of OSI at an example of FTAM in a customer 1 s project. Part 5) 
Ries, N 

IBM Deutschland 

Datacom, v8, nil, pp98-100 , 102-104 , 106, 108 , 1991 
Document type: journal article Language: German 
Record type: Abstract 
ISSN: 0176-3288 

ABSTRACT : 

Forts, aus Heft 9/91). In den vorangegangenen Teilen wurde zunaechst ein 
Ueberblick ueber das OSI-Ref erenzmodell gegeben, weiterhin wurde auf die 
Schicht 7 von OSI sowie auf FTAM eingegangen; der vorliegende Beitrag 
stellt die Normen ISO 8571-2 (Virtual Filestore Definition) und ISO 8571-3 
(File Service Definition) vor, die weitere Aspekte zum Thema FTAM 
beinhalten. Die Virtual Filestore Definition legt die Struktur von Files 
und File-Zugrif f en sowie Attribute und Attribut-Gruppen fest; beim Zugriff 
ist der Access Context ein wichtiger Parameter; Attribute sind: Kernel , 
Storage, Security, Filename, Permitted Actions, Contents Type , Current 
Access Request , Current Initiator Identity, Current Processing Mode, File 
Availability, Filesize, Future Filesize, Current Concurrency Control, 
Access Control, Current Access Passwords, Standard Document Types. Mit der 
File Service Definition werden ein statistisches Modell des File Service 
und die Struktur des File Service festgelegt: Functional Units (Ul Kernel 
, U2 Read, U3 Write, U4 File Access, U5 Limited File Management, U6 
Enhanced File Management, U7 Grouping, U8 FADU Locking, U9 Recovery, U10 



Restart Data Transfer) , Service Classes {T - Transfer Class, A - Access 
Class, M - Management Class, TM - Transfer and Management Class, U - 
Unconstrained Class), FTAM Service Primitives (State Result, Action Result, 
Funktionen und Fehlermeldungen) . (wird fortgesetzt) 
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HamWeb: a new approach to mobile data services 
Hansen, John; 
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DOCUMENT TYPE: Feature Article ISSN: 0033-4812 

ABSTRACT: The writer discusses HamWeb, a new client/server software 
package that allows Amateur Radio operators to access virtually any 
Internet data via amateur packet radio. The HamWeb server receives 
requests for specific types of information or Web pages from 
packet-radio stations. It then initiates requests for the required data 
from the relevant Internet site, processes the resulting information and 
transmits it via packet radio. 
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Retrieval system experimentation and evaluation at lrc. 

Book Title: Nsf Grant Gn 308 1965 July. Linguistics Research Center, 

University Of Texas, Austin, Texas. 9 P. Cfsti, Pb-168-284. He $1.00, Mf 

$0.50. Paper Prepared For Nato International Advanced Study Institute Of 

Evaluation Of Information Retrieval Systems. 

Author(s): Dale, A G 

Publication Date: 1965 

Language: English 

Document Type: Book Chapter 

Record Type: Abstract 

Journal Announcement: 0100 

In place of previously used absolute parameters of retrieval performance, 
a somewhat weaker measure of relative effeciency is proposed that is 
appropriate to the particular type of retrieval system under investigation 
at the linguistics research center, and to the particular problem of 
investigating the effects of controlled changes in indexing techniques 
within the system. It appears that desirable features also inclue (a) 
classification of types of request , and evaluation of system 
performance separately with reference to each type, and (b) the use of 
simulation techniques to permit rapid generation of experimental 
statistics . 
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No simple answer to balancing dynamic content 



Salamone, Salvatore 

InternetWeek , February 21, 2000 , n801 p8, 1 Page{s) 
ISSN: 0746-8121 

Reports on the multiplicity of choices for balancing dynamic content and 
improving the performance of Web sites. Describes five technologies, 
including: bandwidth management /quality of service appliance; intelligent 
compression device; dynamic caching software; static cache appliance; and 
load-balancing switch. Points out the absence of guidelines to assist 
information technology (IT) managers in deciding the best approach to take. 
Explains the lack of methods for discerning if combining the products would 
yield significant improvements, as compared to using one or another 
approach by itself. Notes that load-balancers evaluate access requests and 
direct users to the most appropriate server for request type , while 
static cache tools move content closer to the user. Includes one table. 
(MEM) 
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Visualizing traffic on the World Wide Web 

Markatos, Evangelos P; Papathanasiou, Athanasios E; Papadakakis, 
Nektarios 

WebNet Journal , June 1, 1999 , vl n2 p57-65, 9 Page(s) 
ISSN: 1522-192X 
Product Name: Palantir 

Discusses traffic on the Web. Describes Palantir, a visualization tool 
that can be used to display the origin, volume, and type of the incoming 
requests of a Web server . States the tool is written in Java and can be 
accessed through a regular Web browser without any need for special 
software. Explains that it overlays the URL requests on top of a geographic 
map in order to reveal information about the geographical location of the 
clients of a given Web server. Displays the traffic animation in a realtime 
animated mode so that users can easily spot overloads and pinpoint their 
location on the map. Presents the high-level design and interface of 
Palantir, its structure, its implementation, related work, and the summary 
of the study. Concludes that Palantir can be useful to a range of people 
that use the Internet, including company executives, Webmasters, and 
advertising agents. Includes one diagram, 11 screen displays, and a list of 
references . (CT) 
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Managing digital keys — Sorting out PKI can drive you to distraction 

Willis, David; Shipley, Greg 

Network Computing , December 15, 1997 , v8 n22 58-77, 12 Page(s) 
ISSN: 1046-4468 

Company Name: Entrust Technologies; Netscape Communications; Xcert 
Software 

URL: http://www.entrust.com http://www.netscape.com http: //www. xcert . c 

om 

Product Name: WebCA 1.02; Certificate Server 1.02; Sentry CA 1.41 
Presents a buyers 1 guide to certificate servers. Features a comparison 
table that reviews: the Web server interface; whether or not a Web server 



is included, directory integration, certificate types supported, 
request fulfillment options, platform, and prices- of three products, from 
three companies. Products reviewed and. their ratings (on a five-point 
scale) are: Entrust/WebCA 1.02 ($500 for 500 certificates) from Entrust 
Technologies (888, 613) which lacks scalability features - C; Certificate 
Server 1.02 ($525 for 100 certificates) from Netscape Communications Corp. 
(650) which offers good common administration with Netscape's line of 
server and clients - C+; and Sentry CA 1.41 ($1,495) from Xcert Software 
(604) which ensures an open architecture through a modular approach to 
functionality - B. Reports that Sentry received the Editor's Choice award. 
Includes four screen displays, two sidebars, one photo, one diagram, a 
report card, and a product resource guide, (dpm) 
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Making the most of middleware 

Rao, Bindu Rama 

Data Communications , September 1, 1995 , v24 nl2 p89-96, 5 Page(s) 
ISSN: 0363-6399 

The second of a series of middleware tutorials focuses on remote 
procedure calls ■ (RPC) and message-oriented middleware. Says remote 
procedure calls are extensions to local procedure calls that allow a client 
to invoke a remote server transparently as if the application resided on 
the same system, while message-oriented middleware enable applications to 
exchange messages with other programs. Notes that application-level 
protocols are either of the request -reply type which increases network 
load through its synchronous nature, or the peer-to-peer type which can 
lead to exponential increases in network traffic volumes it can send other 
messages while waiting for the server to respond. Adds that the two types 
can be combined effectively, with RPCs used for sequential exchanges and 
message-oriented middleware used of supporting multiple transactions. 
Includes two diagrams and a chart, (dpm) 
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WHEN THE HITS JUST KEEP ON COMING 

WebTrends is tops among three Web server log analysis tools, but make sure 
you understand the assumptions these programs make before you rely on 
the data they return. 

Byline: THOMAS POWELL 

Journal: Network World Page Number: 4 9 

Publication Date: July 12, 1999 

Word Count: 2710 Line Count: 238 

Text : 

... right Web site log analyzer. Log analyzer programs look at the logs 
produced by Web servers and present the results in a variety of 
reports. The products we tested - WebTrends Log... 

... Commerce Suite 4.0 and WebManage Technologies 1 Netlntellect 4.0 - don 1 1 
look at Web servers in real time, but they do provide detailed site usage 
statistics culled from log files... 

...System (DNS) lookups on IP addresses. Under typical conditions, it takes 
time for a Web server to resolve domain names. In our tests, we enabled 
reverse DNS lookups because reports without... 

. . . that speed dropped from an average of 34M byte/minute to around 1M 
byte/minute. Network conditions and DNS server availability can account 
for such significant delays. To speed things, all the vendors in our... 

... is browsing from behind a firewall, the program records the IP address 
of the proxy server . By assuming that one IP address equals one user, 
these programs risk underreporting visitors if more than one person 
accesses a site through the same proxy server . Fortunately, if a site 
uses cookies and the product can track visitors this way, it... 

. . . answer. The only clue came from a log file that showed two HTTP methods 
of type HEAD. (A HEAD request is a request for only the head of Web 
document, which includes information such as... 

... logs with DNS resolution off. It was just as fast with preresolved 
entries, whereby the server resolves names as it goes along. Once DNS 
resolution was enabled, the product slowed significantly. . . 

... the results of processed logs. Advanced features include support for 
clusters, log analysis for proxy server logs, filters to sort out 
multiple domains served from a single machine, Open Database Connectivity 

... as RealNetworks 1 G2.If you're looking for more than log analysis, 
WebTrends 1 $1,499 Enterprise Suite bundles numerous facilities for Web 
site content maintenance, including link checking, site quality analysis... 
problem was most noticeable when we tried to look at logs from more than 
one server . Because Hit List sets up a common configuration for reports 
when it is installed, we... 



... price, you'll sacrifice Hit List Commerce Suite's data-linking feature 
Marketwave's proxy server plug - in and Tetranet's Linkbot software 
all of which are bundled with Commerce Suite. In addition. . . 
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Foundry switches speed Web delivery 

Jacobs, April 

Network World vl7n41 PP: 24 Oct 9, 2000 
ISSN: 0887-7661 JRNL CODE: NWW 
WORD COUNT: 399 

...TEXT: Internet traffic and content management . This lets customers set 
policies to provision traffic to assigned servers based on the type of 
request - speeding response time for Web surfers. 

Foundry also introduced a Layer 3 LAN Switch, the... 
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Fast switches get smart about managing networks 

Behr, Alyson 

Informationweek n804 PP: 126-130 Sep 18, 2000 
ISSN: 8750-6874 JRNL CODE: IWK 
WORD COUNT: 184 6 

...TEXT: is switching based on certain patterns within the URL where we can 
send a particular type of request to a specific set of servers , " he 
says. The feature lets network managers have better control over Web-site 
deployments by. . . 
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A broader approach to personalization 

Cingil, Ibrahim; Dogac, Asuman; Azgin, Ayca 

Association for Computing Machinery. Communications of the ACM v43n8 PP: 
136-141 Aug 2000 

ISSN: 0001-0782 JRNL CODE: GACM 
WORD COUNT: 3681 

...TEXT: as his/her navigational pattern among the resources. The LOGENTRY 
element consists of the date, server , request , subject, type , 
duration and referrer information of the current resource. The DATE element 
contains the date, time... 
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Switch/router solutions for carrier and ISP backbones 

Zannini, Hank 

Telecommunications (Americas Edition) v32n6 PP: 52-57 Jun 1998 
ISSN: 0278-4831 JRNL CODE: TEC 
WORD COUNT: 1513 

...TEXT: high-priority traffic has been addressed, the remaining bandwidth 
is split among the low-priority requests . By classifying , filtering, 
and shaping network traffic flow using techniques like committed access 
rate (CAR) at the network edges, the core. . . 
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Sniffing out bugs in your LAN helps to maximize bandwidth 

Merenbloom, Paul 

InfoWorld vl8nll PP: 46 Mar 11, 1996 
ISSN: 0199-6649 JRNL CODE: IFW 
WORD COUNT: 577 

...ABSTRACT: LAN/WAN performance. The sniffer can show, graphically, which 
protocols are most heavily used, the types of data requests flowing 
over the network , and the overall traffic performance characteristics. 
...TEXT: In addition, the sniffer could show me, graphically, which 
protocols were most heavily used, the types of data requests flowing 
over the network , and the overall traffic performance characteristics. 

While Network General's sniffer products are not inexpensive... 
? t25/3, k/24, 36-37, 42, 62 
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Netscape 1 s new specification eases Web server management 

Leon, Mark 

InfoWorld vl8n6 PP: 6 Feb 5, 1996 
ISSN: 0199-6649 JRNL CODE: IFW 
WORD COUNT: 251 

...TEXT: an analyst with the Gartner Group Inc., in Stamford, Conn. 

The MIB will make Web server information available, including number and 
type of requests for a given Web page, response time, and traffic 
statistics. If a server stops answering... 
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Introducing concurrency to a sequential language 

Karaorman, Murat; Bruno, John 

Communications of the ACM v36n9 PP: 103-116 Sep 1993 
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...TEXT: invocation of their methods; and datadriven synchronization based 
on using future type results. The active server object can choose the 
type of requests it responds to and in what order. This is a powerful 
mechanism addressing the problem. . . 
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The secret shame of client/server development 

Seybold, Patricia B 

Computerworld v27n32 PP: 33 Aug 9, 1993 
ISSN: 0010-4841 JRNL CODE: COW 
WORD COUNT: 570 

...TEXT: topologies and bandwidths. 

* Optimize performance by sliding the processing logic from the client to 
the server , depending on the type of request and the traffic. 

* Will accommodate more sophisticated aspects of distributed computing, 
such as remote procedure . . . 
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WEBrary: Putting your in-house databases on the web 

Justie, Kevin M 

Library Computing (LSR) , vl8 n2, pll8-129, p. 12 
1999 

JOURNAL CODE: LSR 
DOCUMENT TYPE: Feature 

LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 4112 

TEXT: 

appropriate CGI application program. This program, of which there 
could be several, depending on which type of CGI requests the web 
serverO supports, could be running on the web server itself or on another 
computer connected to... 
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HIGH-SPEED SWITCHES - Intelligence Counts - E-businesses are finding they 
need Layer 4 through 7 

ALYSON BEHR 
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... is switching based on certain patterns within the URL where we can 

send a particular type of request to a specific set of servers , " he 
says . 

The feature lets network managers have better control over Web site 
deployment by. . . 
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. . . occurs between a client and the switch, the other between the switch 
and the Web server - after determining the request type . Otherwise, a 
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... according to Stroh. "Now we can essentially say to our switches , 'If j 

you get a request for this type of content; go to this server , 1 which f 

is something we could not do before. We couldn't drill down and direct... f 
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GRADE : A 

EveryWare Development's Tango Enterprise 2.1, an environment that assists 
in building Internet and intranet databases without coding, includes three 
modules: Tango Editor, which quickly creates search/update constructs 
available to Hypertext Markup Language (HTML) browsers; Tango CGI, for 
passing requests from the Windows applications built with Tango to Tango 
Server ; and Tango Server , which, as the users 1 agent, links the World 
Wide Web server to SQL databases. Server interprets users 1 query/update 
requests and skillfully maneuvers the subject database by using the type 
of request and data input made by end-users . Tango Enterprise works 
well in environments where more than one type of database is used. It 
creates queries and updates for Microsoft Access, dBASE, and other 
databases, as well as Excel spreadsheets. Tango Server communicates 
asynchronously and is multithreaded, so that one instance of the server 
can process requests for various types of databases from many 
concurrent users. An easy-to-use graphical development environment creates 
straightforward search pages, and Record List builder allows the developer 



to establish the data to be retrieved from the database when a search has a 
hit. The developer also controls data formatting for displaying to 
end-users. Testers built a Microsoft Access-based application in less than 
one hour, and operation over a week of testing demonstrated that Tango 
performs quickly and is stable. 
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Netscape Communications 1 Netscape Enterprise Server 3.0 beta is a 
top-notch system that centrally administers and manages enterprise -level 
intranets of Internet sites. It is the core module of SuiteSpot, an 
integrated, nine- server suite for TCP/IP-based e-mail, publishing, 
e-commerce, and groupware over heterogeneous, networked systems. 
Enterprise Server is a comprehensive package with an abundance of tools 
for streamlined, intuitive World Wide Web publishing, directory management, 
content creation, and site security. Native and Open Database Connectivity 
(ODBC) database connectivity are supported. The open systems product 
provides a universal interface with access to processes that support all 
SuiteSpot 1 s servers , irrespective of operating system or platform. 
Administration Server focuses on central management, allowing 
administrators to concurrently manage multiple remote servers by viewing 
them as a cluster. Many robust enhancements are provided, including Web 
Publisher, a Java-based applet for fast access to a server 's files 
through a tree- type view. Common Object Request Broker Architecture 
(CORBA) is provided for better support of applications in a distributed 
computing environment. Netscape ONE, which includes CORBA and Internet 
Inter-ORB Protocol open standards, allows developers and independent 
software vendors (ISVs) to provide streamed multimedia and Hypertext 
Transfer Protocol (HTTP) . 
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Microsoft's Microsoft Visual C++ 4.2 supports both client-side and server 
-side classes. The server -side classes provide all the components 
required to write ISAPI programs, including an ISAPI server skeleton and 
ISAPI extensions. On the client side, everything needed to write browser 
applications is included, along with file transfers and TCP/IP protocol 
handlers. The server applications target Windows NT. The objects and tool 
extensions were originally released as part of the MFC 4.2 prerelease, and 
includes five new MFC classes for creating DLLs for use with Internet 
servers and interactive Web pages. The CHttpServer class, for example, 
establishes a framework for the basic server object, and can handle all 
types of client requests , including CGI executables and Internet server 
applications contained in DLLs. 
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Gibraltar, a Windows NT server that acts as a secure gateway between 
public networks (the Internet) and the projected Microsoft Network 
(MSN) online service, allows corporations to establish their own 'private 
Internets. 1 The product links to both the Internet and MSN, to eliminate 
the need for dial up services. It allows users to create World Wide Web 
home pages and servers and allows users to become content providers on 
MSN. Internet tools, including browsers, management tools, and firewalls, 
allow users to create private Internet networks . Gibraltar allows firms 
to control access to information and user access. Users can request 
particular types of information, which will be sent automatically. 
Similar products are available from Sun Microsystems and Silicon Graphics, 
but an Internet gateway that runs under Windows NT on an Intel platform has 
significant cost advantages for users, according to analysts. 
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Abstract (Basic) : US 20030208470 Al 

NOVELTY - The work units submitted from a workload scheduler, for 
processing on a computer system is monitored by a workload manager. The 
resources for processing work units according to a respective service 

class of the work units, are allocated by the manager and are tuned 
according to work unit's attributes without exceeding allowed 
resources, if work unit is running late with respect to the schedule. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) computer program product comprising computer readable medium 
storing collaborative workload management program; and 

(2) collaborative workload management system. 

USE - For collaborative workload management of computer system in 
company. 

ADVANTAGE - The workload manager aids the workload scheduler in 
achieving business goals by providing it with the attributes of work as 
it is being submitted for processing. Thus workload manager can make 
intelligent decisions about the execution of work, with respect to 
system resources. 

DESCRIPTION OF DRAWING (S) - The figure shows the flow diagram 



explaining the collaborative workload management process, 
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NOVELTY - A positive effect on a performance measure, of adding 
predetermined number of servers to a service class (110) is 
determined. A donor class and its negative effect on the performance 
measure is also determined. The predetermined number of servers are 
added only if the positive effect outweighs the negative effect. 

DETAILED DESCRIPTION - The donor class is selected from the server 
classes to obtain the system resource necessary to add the 
predetermined number of servers to service class (110). INDEPENDENT 
CLAIMS are also included for the following: 

(a) server number controlling apparatus; 

(b) program for controlling number of servers 

USE - For controlling number of servers for workload management in 
information handling system for processing incoming work requests. 

ADVANTAGE - Since both positive and negative effects are 
calculated, the service class outweighing negative effect can be 
determined for adding the server. The performance measure enables 
addition or removal of servers with simple processes. 

DESCRIPTION OF DRAWING (S) - The figure shows the system structural 
diagram of server number controlling system. 
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ABSTRACT EP 110214 9 A2 

Input /output (I/O) configurations of a computing environment are 
managed. This management includes dynamically adjusting an I/O 
configuration, when it is determined that such an adjustment is needed or 
desired. In order to make the adjustment, a channel path is selected from 
a plurality of channel paths. The selection of the channel path to be 
used in the adjustment is based on one or more characteristics associated 
with the channel path. 
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ABSTRACT EP 1089173 A2 

The configuration of the logical processors of a logical partition is 
managed " dynamically . A logical partition is initially configured with one 
or more logical processors. Thereafter, the configuration can be 
dynamically adjusted. This dynamic adjustment may be in response to 
workload of the logical partition. 

ABSTRACT WORD COUNT: 4 6 

NOTE: 

Figure number on first page: NONE 

LEGAL STATUS (Type, Pub Date, Kind, Text): 
Application: 010404 A2 Published application without search report 

Search Report: 020320 A3 Separate publication of the search report 
Examination: 020703 A2 Date of request for examination: 20020429 

LANGUAGE ( Publication, Procedural , Application) : English; English; English 

FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200114 282 

SPEC A (English) 200114 6287 
Total word count - document A 6569 
Total word count - document B 0 
Total word count - documents A + B 6569 



10/5/5 (Item 3 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts. reserv. 

00774653 

Apparatus and method for managing a distributed data processing system 

workload according to a plurality of distinct processing goal types 
Vorrichtung und Verfahren zur Verwaltung der Arbeitsbelastung eines 

verteilten Datenverarbeitungs systems gemass verschiedenen Sorten von 

Verarbei tungs z wecken 
Dispositif et methode de gestion d f une charge de travail d ! un systeme de 

traitement de donnees distribue conformement a differents types de but 

de traitement 
PATENT ASSIGNEE: 

International Business Machines Corporation, (200120), Old Orchard Road, 
Armonk, N.Y. 10504, (US), (applicant designated states: DE; FR; GB) 
INVENTOR: 

Eilert, Catherine Krueger, 34 Sherwood Heights, Wappingers Falls NY 12590 
, (US) 

Yocom, Peter Bergersen , 17B Wildwood Manor, Wappingers Falls NY 12590, 
(US 

LEGAL REPRESENTATIVE: 

Schafer, Wolfgang, Dipl.-Ing. (62021), IBM Deutschland 

Inf ormationssysteme GmbH Patentwesen und Urheberrecht , 70548 Stuttgart, 
(DE) 

PATENT (CC, No, Kind, Date) : EP 725339 A2 960807 (Basic) 

EP 725339 A3 961002 
APPLICATION (CC, No, Date): EP 95112759 950814; 
PRIORITY (CC, No, Date) : US 383168 950203 
DESIGNATED STATES: DE; FR; GB 
INTERNATIONAL PATENT CLASS: G06F-009/4 6; 



ABSTRACT EP 725339 A3 

An apparatus for managing a workload distributed across data 
processing systems in accordance with a common performance standard, 
which includes a means for measuring the performance of the work units 
to create local performance data; a means for sending said local 
performance data to at least one other system; a means for receiving 
performance data from at least one other system to create remote 
performance data; and a means responsive to said local and remote 
performance data for adjusting at least one of the system control 
parameters to modify the performance of the work units on the system to 
achieve the common performance standard, is disclosed. Also disclosed is 
a method for managing workload as represented by the apparatus. (see 
image in original document) 
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Detailed Description 

Claims 

Fulltext Word Count: 15079 
English Abstract 

The allocation of shareable resources of a computing environment is 
dynamically adjusted to balance the workload of that environment. 
Workload is managed across two or more partitions of a plurality of 
partitions of the computing environment, which are preferably configured 
as groups of partitions. At least one group of the computing environment 
includes a plurality of partitions of the computing environment. 
Shareable resources .are assigned to the partitions of the group and are 
managed as a group. The managing includes dynamically adjusting 
allocation of a shareable resource of at least one partition of the two 
or more partitions in order to balance workload goals of the two or more 
partitions. One example of this is managing central processing unit (CPU) 
resources within a computing environment. When the allocation of CPU 
resources to a partition of the computing environment is to be adjusted, 
the allocation is adjusted dynamically. The adjusting includes modifying 
processor weights associated with the partitions. 

French Abstract 

L' affectation de ressources partageables dans un environnement 
informatique est reglee dynamiquement de facon a equilibrer la charge de 
cet environnement. Ladite charge est geree par au moins deux partitions 
d'une pluralite de partitions de 1 1 environnement informatique, 
configurees de preference en groupes de partitions. Au moins un groupe de 
1 1 environnement informatique comprend une pluralite de partitions de 
1 * environnement informatique. Les ressources partageables sont affectees 
aux partitions de ce groupe et sont gerees en groupe. La gestion consiste 
a regler dynamiquement 1 ' affectation d'une ressource partageable d'au 
moins une partition parmi les partitions, de facon a equilibrer les 
objectifs de charge de travail desdites partitions. La gestion des 
ressources d'une unite centrale de traitement (UC) dans un environnement 
informatique est un exemple de cette gestion. Lorsque 1 ' affectation des 
ressources UC a une partition d'un environnement informatique doit etre 
reglee, cette affectation est reglee dynamiquement. Le reglage consiste a 
modifier les poids des processeurs associes aux partitions. 
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